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A  Library  of  Failure  Regions 

Timothy  J.  Shimeall 
Code  CS/Sm 
Computer  Science  Dept. 

Naval  Postgraduate  School 
Monterey  CA  93943-5100 

This  report  is  a  collection  of  the  failure  regions  for  the  known  faults  in  a  collection  of 
implementations  of  a  combat  simulation  program.  A  failure  region  is  the  set  of  all  possible 
program  inputs  that  will  execute  a  specific  fault  and  produce  a  result  that  varies  from  the 
specified  or  expected  result.  A  fault  is  an  erroneous  (possibly  non-contiguous)  section  of 
program  source  code.  The  purpose  of  this  report  is  to  document  a  set  of  failure  regions 
corresponding  to  the  known  faults  in  a  set  of  redundant  program  versions. 

Each  failure  regions  is  characterized  in  two  ways:  by  identifying  the  fault  that  it  reveals 
and  by  identif3dng  the  boolean  conditions  sufficient  to  consider  a  program  input  to  be  a 
member  of  the  failure  region.  These  boolean  conditions  are  divided  into  three  parts.  Those 
labelled  “Condition  I”  are  the  conditions  that  cause  an  input  to  execute  the  fault.  Those 
labelled  “Condition  11”  are  the  conditions  that  cause  the  execution  of  the  fault  to  produce 
an  erroneous  internal  state.  Those  labelled  “Condition  III”  are  the  conditions  that  cause 
that  erroneous  internal  state  to  be  propagated  to  become  part  of  a  result.  The  process  of 
determining  these  conditions  is  dealt  with  at  length  in  a  recent  Master’s  Thesis[l]. 

There  have  been  two  simplifications  made  in  the  course  of  deriving  the  failure  regions 
in  this  report.  First,  all  uninitialized  variables  are  assumed  to  have  erroneous  values.  This 
simplification  is  made  to  avoid  machine-dependent  probablistic  modeling  of  the  conditions 
under  w’hich  a  coincidental!}"  correct  value  ma>’  be  found  in  an  unitialized  variable.  Second, 
the  effects  that  one  failure  region  has  on  another  have  been  neglected  here.  During  the 
analj'sis  process,  each  fault  is  considered  in  isolation  of  all  other  known  faults  in  the  code. 

The  failure  regions  in  this  report  are  for  the  known  faults  in  eight  implementations 
of  CONFLICT,  a  simplified  nonprobablistic  combat  simulation,  that  were  developed  in  the 
course  of  a  software  experiment [2].  It  is  assumed  that  the  reader  is  verj’  familiar  with  the 
CONFLICT  Specification [3].  All  of  the  failure  regions  that  follow  arise  from  violations  of 
that  specification  and  all  of  the  variables  and  many  of  the  conditions  described  below  are 
abstracted  from  the  specification  or  from  the  implementations  of  that  specification. 

The  regions  in  this  report  are  profiled  and  analyzed  in  an  accompanying  document[4]. 
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Notation 

In  the  descriptions  that  follow,  the  following  conventions  are  used: 

•  So  far  as  is  possible,  the  conventions  of  the  specification  have  been  preserved. 

•  Text  appearing  in  italics  (e.g.  ^Endurance')  are  defined  within  the  scope  of  this 
document,  either  globally  or  for  a  specific  failure  region. 

•  Text  appearing  in  roman  type  (e.g.  ‘Army[]. Endurance’)  are  program  variables  for 
the  implementations  containg  the  fault.  The  only  exception  to  this  is  the  variable 
‘Mainloop’,  which  is  used  to  indicate  the  current  simulation  cycle,  but  may  not 
appear  in  a  specific  version  under  that  name.  ‘Mainloop’  is  normally  defined  within 
the  Active  predicate,  implicitly  existentially  quantified. 

•  Due  to  the  fact  that  program  variables  are  more  than  one  character  in  length,  all 
multiplication  is  shown  explicitly  with  the  multiplication  symbol  x. 

•  Due  to  the  length  of  the  formulae  below,  it  is  necessary  to  break  formulae  across 
more  than  one  line.  There  are  no  matrix  or  vector  operations  appearing  in  this  doc¬ 
ument,  and  parentheses  are  used  strictly  to  delimit  portions  of  formulae  to  improve 
readability  or  to  indicate  precedence  of  operations. 

•  All  definitions  within  ‘Condition  1’  of  a  failure  region  are  assumed  to  extend  over 
‘Condition  IF  and  ‘Condition  III’  of  that  failure  region  unless  use  of  parentheses  in¬ 
dicates  otherwise.  All  definitions  within  ‘Condition  IF  of  a  failure  region  are  similarly 
assumed  to  extend  over  ‘Condition  III’  of  that  failure  region. 

•  The  diacritical  marks  '  and  "  are  used  strictly  to  distinguish  between  variables  of 
similar  name  and  role  in  a  given  failure  region. 
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Time-Dependent  Definitions 

Endurance  of  Squadron  {B,  g,  j)  at  time  t: 

Endurance{B,  g,j,  t)  =Army[5,  p].Endurance[j]  — 

Army[B,5].Wear[j]  x  t— 

Damage{B,g,j,t  -  1)  +  Repair {B,g,j,t  -  1) 

Weapon  Damage  of  Squadron(5,y,;)  up  to  and  including  time  t: 

(0 


if  t  <  1 


Damage{B,g,j,t)  =  < 


Damage{B,g,j,t  —  1)+  otherwise 

NArmy[-*B]  /Params.NumWTypes  / Army [-«B,e].Weapon[ii;].Niun Weapon 

E  i:  E 

e=l  \  w=:l  \  t=l 

/ Army[-i5,  e].Weapon[ie].Damagex  \  \  \ 

Armyf-iB,  ^].  WeapSensativity[u>]  x 


max 


0,1- 


l)  1 )) 

(.y  B  l)  1)) 

Army  [-*B  ,e] .  Weaponlt/;]  .Radius 


Whether  or  not  Squadron(B,^,j)  is  a  casualty  at  time  t: 

Casualty{B,g,j,t)  =  {Endurance{B,  g,  j,t  —  1)  >  0)A 

(Endurance{B,gJ,t-l)  n 
Army[B,p].Endurance{j]  —  *  / 

Repair  applied  to  Squadron(B,5,j)  up  to  and  including  time  t: 

^0 


Repair{B,g,j,t)  =  < 


if  <  <  1 


Repair{B,gJ,t  -  1) 


if  {t  >  1)A 
■'Casualty{B,g,j,t  —  1) 


Repair(B,g,j,t  —  1)+  otherwise 

m{n{Suppl{B,g,t  —  l)fA^umCas{B,g^t), 
FixRate{B,g,t  —  ].)/NumCas{B,g,t), 

(Army[B,  ^].Endurance[j] 

—  Endurance{B,  g,  j,t  —  1) 

—  Repair {B,g,j,  t  —  1) 

+RepairlB,g,j,t  -  2))) 


Number  of  Casualties  in  Battalion  B,  g  at  time  t: 

1  if  Casualty(B,g,j,t  —  1) 

0  otherwise 


Anny[B,p). Squadrons 

NurrtCas{B,  g,t)  =  ^ 

j=i 
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Rate  of  Repair  available  to  any  squadron  of  battalion  B,  g  at  time  t: 

FixRate{B^g,t)  =  Army[B,5].FixRate  x  NuTnFix{B,g,t  —  1) 

Number  of  Squadrons  in  battalion  B,  g  dedicated  to  repair  other  squadrons  at  time  t: 


Army  [B  ,p]  .Squadrons 

E 

i=i 


NumFix{B,  g,t)  =  Army[5,  ^j.NumFixers  x 


Amount  of  supplies  available  in  battalion  B,  g  at  time  t: 


0  if  ~>Casualiy{B,g,j,t) 
1  otherwise 


Army[B,  5]. Squadrons 


Army  [B  ,p]  .Squadrons 

Suppl{B,g,i)  =  Army[5,5].FixSuppl  —  ^  Repair{B^g^j^t  —  1) 

i=i 

Location  of  Battalion  B,  g  at  time  t: 

XB,git)  =Army[B,5].X+ 

t 

^^[V{B^g,d)  X  cos(Army[B,5].Theta) 

^TM{B,g,XB,g{d-\),yB,g{d-  \),V{B,g,d-  1)) 

y.\V M{B,g,XB,g{d  -  l),yB,g{d  -  l),d)) 

y"  Location  of  Battalion  5,  g  at  time  t\ 

yB,gii)  =Army[B,5].Y+ 

t 

p,d)  X  sin(Army[B,^]. Theta) 


dzzi 


xTM{B,g,XB,gid-  l),yB,g{d-  l),V{B,g,d-  1)) 
xWM{B,g,XB,g{(^-l),yB,g{d-  l),d)) 


Velocity  of  Battalion  B,  g  at  time  t: 


A rmy[B, 5]. Squadrons  [ 

V{B,g,t)=  min 

j=i 


if  Endurance{B,g,j,t  —  1)<  0 
\Army[B,5].V0[i]  x  otherwise 
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Terrain  effect  on  Movement  of  Battalion  B,  g  at  location  x,  y  moving  at  velocity  v‘. 

Let  x'  and  y'  represent  the  end  of  the  possible  movement,  p,  q  be  the  Terrain  grid  location 
of  x,y: 

x'  =  X  +  V  X  cos(Army[J3,5].Theta) 
y'  =  y  V  X  sin(Army[5, ^]. Theta) 


p{x)  =  [ 


Params.X  Delta 


Q{y)  =  [ 


_ ^ _ 

Params.YDelta 


(0 


TM{B,g,x,y,v)  =  < 


if  V  =  0 


max  I  0, 


Anny[fl,5].MaxSlope- 


Army[B,p].MaxSlope 


.J.v) 


otherwise 


\Veather  effect  on  Movement  of  Battalion  B,  g  at  location  x,  y  at  time  t: 
Let  (VLA^,  ITi^)  be  the  center  location  of  storm  i  at  time  t: 


\VX,  = 


r  Weather [fj.WXO  if  f  <  Weather[/].TStart  V  f  >  Weather [?].TEnd 
[  Weather[f].WX0  +  (t  —  Weather[?].TStart)  x  Weather[?].dWX  otherwise 
' Weather[?].WY0  if  t  <  Weather [?].TStart  V  t  >  Weather[?].TEnd 

WYi  = 

\\eather[2]A\'Y0  +  {t  —  Weather[?].TStart)  x  Weather [f].dWY  otherwise 
Let  IE  be  the  total  effect  of  storms  on  location  {x,y)  at  time  t: 

0  if  f  <  Weather [?]. TStart  V  t  >  Weather[f].TEnd 


Params .  N  um  W  Event  s 

lV{x,y,t)= 

i=\ 


max  I  0, 


\Veather[i].\VRadius— (r— n'A',)^+(y— H'K,) 
\Veather[i].WRadjus 

Weather  [?].WSeverity 


otherwise 


if  W{x,y,t)  =  0 


WM{B,g,x,yJ)  -  |Army[5,p].MWEffect; 


I  lV(r, y,t)  — Params. WMaxSeverityX  Par  ams.Num  WE  vents  I  ii 

1  Params. WMaxSeverityX Params. NumWEvents  |  ^  Cr\\  ISe 
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Weather  effect  on  Observation  at  location  {x,y)  at  time  t: 


WO{x,y,t)  = 


W(x,v,0  — Params.WMaxSeverityxP^l^ams♦NumWEvents[ 

Params.WMaxSeverityx  Params.NumWEvents  | 


if  \V{x,y,i)  =  0 


otherwise 


(A^,y)  Location  of  Squadron  B,  g,  j  at  time  t: 

Let  s  be  the  number  of  Squadrons  in  Battalion  B,g  prior  to  squadron  j  that  have  positive 
endurance  at  time  t: 


s{B,g,j,t) 


■IP' 


if  Endurance(B,  g,i,i  —  1)  <  0 

otherwise 


—  1)  +  Army[B,  ^j.SquadSepx 

{s{B,gJ,t)  -  X  Army[S,y].GRow)  - 

Army  [B,ff].GRowx  Army  [B,g].SquadSep 
2 

if  5,  Army[B, 5]. Squadron -f  l,t)  -  s{B,g,j,t)  > 

Army  [5,  g] .  GRow 

—  1)  +  Army[B,  5].SquadSepx 

{s{B,g,j,i)  -  ><  Army[B, 5] .GRow)  - 

s(B,p,Army[B,p].Squadron+l,t)-  J  X  Army GRow 

2 


X  Army  [5,  ^j.SquadSep 


otherwise 


=J/B.s(<  -  1)  +  Army[B,p].RowSep  X  [AnnylB.gffRowj 
-0-5  X  X  Army[B,5].RowSep 
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Squadron  B,  g,  j  observes  squadron  ->5,  e,  k  at  time  t: 

Observe{B , g  J ,  k,t)  =  BigEnough{B,g,j,e,k,t)  A  Clear{B,g,j,e,k,t) 

AObvious{B,  g,  j,  e,  k,t) 


Squadron  ->B,  e,  k  is  large  enough  to  be  seen  at  the  distance  from  squadron  B,  g,  j  at 
time  t: 


BigEnough{B,  g,j,  e,  k,  t)  = 

^gj  =  -\)^ygj  =  yB,3.j{t  -  1)A 


xek  =  x^B,eA^  -  1)  A  yek  =  y^B,t,k 


t  -  1)A 


(max|tan"'  (^)  “  ^an”^ 

(x',  ?/'),  {x'\  y")  e  {(xe^  ±  Army[-iB,  e].SquadWidth/2, 
yek  ±  Armyf-i^,  e].SquadLength/2)} 

>  Army[B,  ^].ObsMinAngle[j]) 


No  terrain  blocks  the  view  of  squadron  -iB,  e,  k  from  the  position  of  squadron  5,  j  at 
time  i: 


Clear{B,g,j,e,k,t)  = 

^gj  =  -  1)  A  -  1)A 

xek  =  x^B,e,k{t  -  1)  A  yek  =  y^B,e,k{^  “  1)A 


(Va,a',c,  c',2,2',G  =  [ 


3:93 


Params.XDelta 


A  a'  = 


xek 


Paxams.XDeltaJ 


A 


VQJ  ^ 

Params.YDelta 


A  c'  = 


_ _ 

Params.YDelta 


A 


2  =  Alt{a,  c,  xgj.  ygj)  /\  z'  =  Alt{a',  c',  xek,  yek)A 
(Vn.l  <n<  Params.SampleRate  —  1, 

/•q-  _  _  _  _  _ 2 _  _  I  Tg}+rx(xek-xgj)  I  _  I  ygj+rx{yek-ygj)  I 

V  Params.SampleFlate—l  ’ [  Params.XDelta  J  ’  [  Params.YDelta  J  ’ 

{z  +  r  X  {z'  -  z))  >  AH{p,  q,  xgj  +  r  x  {xek  -  xgj),  ygj  +  r  x  [yek  -  ygj)) 

)  )  ) 


Squadron  e,  k  differs  enough  from  its  background  to  be  discerned  by  squadron  B,  g, 
j  at  time  t: 

Obvious{B,  g,j,  e,k,t)  = 

xgj  =  -  1)  A  ygj  =  -  1)A 

xek  =  x^B,e,k{^  —  1)  A  yek  =  y^B,€,k{i  —  1)A 

Anny[~*B,e].SquadLntensity(/c] 

. 

ims .  SaiTiDle  Rat  e 

[{\VO  (xgj  X  X  Mainloop)  x 

Army[5, 5].VWEffect)+ 


BI(a\c'<,X€kyy€k) 
Params.  SampleRate 

E 

n=l 


NArmy[-‘B] 

E 

e'  =  l 


0  if 


^x-,B,e'(Mainloop  — 

1) 

-  xgj  X 

nx(T€k—Tgj) 

Params .  SampleRat  e/ 

^  (l^Iainloop  — 

1) 

-  ygJ  X 

nx(gek-ygj)  N' 

Params. SampleRate  / 

)  + 


>  Armyf-'B,  e'j.ObsJamRadius 


^x-,B_e'(Mainloop 

-1) 

-  xgj  X 

nx(x€k—xgj)  \ 

Pcirams, SampleRate/ 

(y-B,e'(Mainloop 

-1) 

-  ygj  X 

nx(yek-ygi)  V 

Params  .SampleRat  e / 

)  + 


Army  [“>  B ,  e '] .  O  bs  J  am  Radi  US 

X  Army[-iR,  e'j.ObsJamEff  otherwise 
))  <Army[5, 5].ObsMinContrast[j]) 

Squadron  -^B,  e,  k  is  in  range  of  the  weapons  of  battalion  B,  g  at  time  i: 

InRange{B,  g,  e,  k,i)  = 

xek  =  x^B,e,k{t  -  1)  A  yek  =  y-B^eA^  ~  1)A 

yj{xek  -  XB,g{t  -  1))^  +  [yek  -  yB,g{i  -  1))^  <  Army[5,^].Weapon[f]. Range 
Number  of  Squadrons  in  battalion  R,  g  dedicated  to  processing  messages  at  time  U 

NumProcess{B,g,t)  =  ArmyfR, ^fl.NumProcess  x  R'U'mCas{B,g,  t) — 

Army[R,  5]  .Squadrons 

Number  of  Squadrons  in  battalion  B,  g  dedicated  to  receiving  messages  at  time  t: 

NumRec{B,g,t)  =  Army[B,p].NumReceive  x  ^urr^as{B,g,i) — 

Army[.D,  ^J. Squadrons 

Number  of  Squadrons  in  battalion  B,  g  dedicated  to  communications  jamming  at  time  i: 

1.7  T  /r,  A  rr,  1  TAT  NumCas(B,g,t) 

Num  Jam{B,g,t)  =  Army  .NumJammers  x  - - - ^ — 

Army[R,  ^j. Squadrons 

Number  of  Squadrons  in  battalion  B,  g  dedicated  to  sending  communications  at  time  i: 

NumSend{B,g,t)  =  Armv[.B,5].NumSend  x  - — 

Army[5,  ^J. Squadrons 

Number  of  functional  w'eapons  of  type  i  in  battalion  B,  g  at  time  i: 


A^urn\\'eapon{B, g,i,t)  =  Army[5,5f].Weapon[i].NumWeapon  x 


NumCas{B,g,  i) 
Army[R,  5^]. Squadrons 
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Target  coordinates  for  weapon  i  of  type  w  in  Battalion  g  at  time  t: 

n  -1C  J  /lif3i,06ser„e(B,s,;,e',t',(-l)' 
y  E  I-B. '  l.Squadrons 


\k'  =  l 
/w-\ 


1  'd  3j,0bserve{B,g,j,e,k',t  —  l)\  \  _ 
0  otherwise  )  ) 


N umW eapon{B ,  g ,  w\  <)  J  -|- 1  —  1 


B —  y->B,e,k  3 


/ ^-1  ( ^  :r  -]  *  /OL _ /  D  ^  ^  IJ  4  i  \  \  \ 


/u-1 


1  if  3j,0bserve{B,gJ,e,k\t  -  1)^  \  _ 
0  otherwise 


y~^  Nuni]]"eapon{B,g,w',t)  1  +  i  —  1 


W'=l 


Command  Message  m  Implemented  in  Battalion  B,g  before  time  t: 

Mimp{B,g,in,t)  = 

((Cmsgs[5,  njj.Time  +  Army[J5,  pj.MediaDelay 
+RecDelay{B^  g,  RecT{B,g,m))  +  QueDelay{B,g,m) 
+Army[S,5].ProcDelay)  <  t)A 
(Cmsgs[J5,  mj.Dest  =  g) 

Delay  due  to  message  receipt  at  battalion  B,  g  at  time  t: 

{oo  if  NumRec{B,g,t)  —  ComJam{B,g,t)  <  0 

- Army[B.g]BecRate - otherwise 

NumRec{B,g,t)-ComJam(B,g,t) 

Number  of  jammed  receivers  in  battalion  B,  g  at  time  t: 

ComJam{B,g,t)  = 

NArmy[-'B] 

y^.  mm{NumJ am{-> B ,  e,  t),  Army[->B,  e].CommJamPriority[5r])x 

C  =  1 

Army[-i5,  ej.CommJamEffx 

Army [-iB.e], Comm JamRadius--^(i.,fl,;(<-l)-iB^g(<-l))^+(v-,B,e(t-l)-VB,g(<-l))^  \ 

max  ^  ,  AimyliBiej.ConvmJamRadius  J 

Delay  due  to  message  queuing  of  command  message  m  in  Battalion  J9,  g: 


Duration 

QueDelay{B,g.m)  =  ^ 

t=RecT(B  yg,m) 


'1  if  CmdSum{B,g,m,t)  ReptSum{B,g,m,t) 
>  NumProcess{B,g,t  —  1) 

,0  otherwise 
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Time  command  message  m  is  received  at  battalion  B,  g: 

RecT{B,g,m)  =  Cmsgs[5,  m].Time+ Army[5,5].MediaDelay 

Time  delay  for  report  message  from  battalion  B,  f  to  be  transmitted  to  battalion  5,  g: 

RepT{B,g^f)  =  Army[B, /j.SendRate  +  Army[5,5].MediaDelay 

Number  of  command  messages,  other  than  m  being  processed  by  battalion  B,  g  at  time  t: 

0  if  (m  =  n)  V  (Cmsgs[5,  nJ.Dest  ^  g)V 
{t  <  RecT{B,  g,n)A 

NCmsgs[B]  Cmsgs[5, m]. Priority  >  Cmsgs[B,  n]. Priority) 

CmdSum{B,  g,m,t)  =  <  V(Cmsgs[5,  n].Time  >  t)V 

(i?ec7’(5, 5,  n)  +  Army[5,  pj.ProcDelay  <  t) 

1  otherwise 

Some  opposing  squadron  exists  and  is  observed  by  a  squadron  of  B,  g,  at  time  t: 
SomeObserve{B.  g,t)  = 

(3e,  1  <  e  <  Narmyf-'^],  Arm}’[-i5,  e]. Squadrons  >  0  A  EObserve{B,g,e,t)) 

Some  opposing  squadron  in  battalion  -<B,  e,  exists  and  is  observed  by  some  squadron 
of  B,  g  at  time  t. 

EObserve{B,g,  e,  t)  = 

{3k,  I  <k<  ATTny[-'B,e].SquadTons,Endurance{-'B,e,k,t)  >  OA 
{3j,  1  <  i  <  Army[5, /]. Squadrons, 

Endurance{B,f,j,t)  >  0  AObserve{B,g,j,e,k,t))) 

Number  of  report  messages  being  processed  by  battalion  B,  g  at  time  t,  while  message  m 
may  be  queued; 


ReptSum{B ,g,  m,  t) 


(0  if 


NArmv[B] 

E 


/=i 


< 


(Army[5, /]. Report  ^  g)\/ 

{'dt',t  —  RepT{B,g,f)  —  Army[5,  pj.ProcDelay 

-  RepT{B,g,f), 

-iS omeObserve{B ,  /, 

{SomeObserve{B,  f,t  —  RepT{B,  g,  f)A 
Army[B, /]. Priority  <  Cmsgs[B,  m]. Priority) 


1  otherwise 
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Global  Definitions 

Battalion  B,  g  is  active: 

Active{B,g)  =((Duration  >  0)  A  (Mainloop  6  {O...Duration})A 
(B  G  {TRUE,  FALSE})  A  (NArmy[R]  >  0)A 
{g  G  {l...NArmy[B]})  A  (Army[B, 5]. Squadrons  >  0)A 
(3i,  1  <i  <  Army[J5,^]. Squadrons, 

Endurance{B,  g,i,Ma.in\oop)  >  0)) 

Altitude  at  position  {x,y)  in  Terrain  grid  {p,q): 

(  Terrain  [p,  9]  — Terrain  [p  +  1,  9]—  \ 

Terrainjp,  q  +  1]+Terrain[p  +1,^+1]  xa:xj/|  + 
Params.XDelta  x  Params.YDelta  / 


/  g(Terrain[p,  9+1]  — Terrain[p  +1,9  +  1])  — 
(  (9  +  l)(Terrain[p,  9]— Terrain[p  +  1,9]) 

'  Params.XDelta 

(p(Terrain[p  +1,9]  — Terrain[p  +  1,9+  1])— 
(p+  l)(Terrain[p,  9]-Terrain[p,  9+  Ij) 
Params.YDelta 


X  a:  + 


X  y  + 


(p+  1)((9  +  l)Terrain[p,9]  -  9Terrain[p,  9  +  1])- 
p{{q  +  l)Terrain[p  +1,9]  —  9Terrain[p  +  1,9  +  ij) 

Background  Intensity  at  position  {x,y)  in  Terrain  grid  (p,  9): 


/ Terrain[p,  9  +  1]  —  Terrain[p,  9] 


+  \ 


Blip,  9,a:,y)  = 


Terrain[p  +1,9+1]  —  Terrain[p  +1,9] 

V  2(Params.XDelta) 

f  Terrain[p  +1,9  +  1]  —  Terrain[p,  9  +  1]+  ^  ^ 
Terrain[p  +1,9]  —  Terrain[p.  9] 


+ 


\  \  2(Params.YDelta) 

X  Params.ISlopeFactor+ 

Pararrx;  T Alt F.irt nr I 
raramS.lAltf  actor  Params.IMeanAlt  + 

Params.IX  x  x  +  Params.IY  x  y  +  Params.IC 
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Failure  Regions  in  Version  1 


1.1:  Incorrect  handling  of  NumCas  when  Army.Squadrons=0 

initially 

Condition  I: 

Duration  >  0  A  {3B,B  G  {true,  false},  NArmy[B]  >  0 
Condition  II: 

(3^,  1  <  ^  <  NArmy[S],  Army[5,  y]. Squadrons  =  0)) 

Condition  IIIrTrue 

1.2:  Update  always  implements  commands  ready  at  the  same 
time  in  CMsgs  array  order 
Condition  I: 

Active{B,g)A 

(3m,n,l  <  m  <  NCmsgs[5],l  <  n  <  NCmsgs[5],m  <  nA 
M imp{B,g,  m,  Mainloop)  A  -'Mimp{B^  g,  ni,  Mainloop  —  1)A 
M imp{B,  g,  n,  Mainloop)  A  -iM inip{B,g,  n,  Mainloop  —  1) 

Condition  II: 

Cmsgs[B,  m]. Priority  <  Cmsgs[B,  n]. Priority  A  Cmsgs[B,  mj.msg  Cmsgs[B,  mj.msg 

Condition  III: 

I  <  i  <  NCmsgs[B],2  ^  m  Ni  ^  nA 
Mimp{B,g,  i,  Duration)  A  -iMimp{B,g,  i,  Mainloop  —  1))) 


1.3:  Over-restrictive  check:  positive  dWX 
Condition  I:Params.NumWEvents  >  0 
Condition  II: 

32,1  <i<  Params.NumWEvents,  Weatherftj.dWX  <  0 
Condition  III:True 


12 


1.4:  Over-restrictive  check:  positive  dWY 
Condition  I:Params.NumWEvents  >  0 
Condition  II: 

3i,  1  <  i  <  Params.NumWEvents,  Weather[t].dWY  <  0 
Condition  IIItTrue 

1.5:  Garbage  value  in  FixSuppl  when  Fix  Supplies  exhaused 

Condition  I: 

Active{B^  g)A 

(Bj,  1  <j<  Army[5, ^i]. Squadrons,  Ca5ua/<?/(5, 5', 7,  Mainloop)) 

Condition  II: 

(  Army  Squadrons  \ 

2, Mainloop)  1  >  Army[B,p]. FixSuppl 

Condition  III: 

(^2,1  <i  <  NCmsgs[5],  i\/irnp(5, 5,  z,  Duration)  A  Biinloop  —  1)) 

1.6:  Spurious  input  check  requiring  lAF  >  0 

Condition  I:True 

Condition  II:Params.IAltFactor  <  0 
Condition  III:True 

1.7:  Spurious  Input  check  requiring  NumWEvents  >  0 

Condition  I:True 

Condition  II:Paranns. NumWEvents  <  0 
Condition  III:True 
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1.8:  Negative  NW  value 

Condition  I: 

35,51,  Active{B,  g)  A  Aciive^-iB,  e)  Al  <  i  <  MainloopA 

(Bj,  A:,  1  <  k  <  Army [->5,  e]. Squadrons  A  1  <  j  <  Army[5,^].SquadronsA 
Endurance{B,  g,j,t)  >  0  A  Endurance{->B^  e,k,t)  >  0  A  Observe{B,  g,j,  e,k,t))A 
Params.NumWTypes  >  1 


Condition  II: 


3i,  1  <  ?  <  Params.NumWTypes,  Army[5, 5]. WeapPriority[e,  z]  <  OV 
N umW eapon{B ,  g,  i,  Mainloop) 

<  (A'^timlPeapon(5, 5,  z,  Mainloop  —  1)  —  NumWeapon{B,  g,i,  Ma.m\oop)+ 


Mainloop  NArmy[“>B] 

E  E 


n=l 


e'  =  l 


/'mind  {k'  B  3j,0bserve{B,  g,j,e',k',n  —  1)}  |,'' 
Army[5,^].WeapPriority[e',  z], 
NumW eapon(B ,  g,  z,  n)) ) 


A^UTnU’eapon(B,p,t,Mainloop— 1) 


Condition  III: 


(^ZTZ,  1  <  m  <  NCmsgs[5],  Mimp{B,  g,  m,  Duration)  A  -<Mimp{B,  g,  m,  Mainloop  —  1))A 
(^m,l  <  m  <  NCmsgs[-'5],  Mzmp(->5,  e,  m.  Duration) A 
->Mimp{-<B,  €,  m,  Mainloop  —  1)) 


1.9:  PSentListLoc  sends  out  of  range  squadron  to  Squad  Alive 

Condition  I: 

Active{B,  g)  A  Activ€{->B,  e)  A  Aciive{B,  f)  A  Arm}’{5,  /]. Report  =  gA 
{3t.  1  <  t  <  Duration, 

t  =  Mainloop  —  RepT{Byf,g)  —  Army[5,  ^j.ProcDelay 

_ Army[B,g].RecRate _  . 

NumRec{  B  , Mainloop— Army  [B  ,p]  .ProcDelay ' 

(3^',  1  <  A'  <  Army[-i5,  e]. Squadrons,  (3j,  1  <  j  <  Army[5, /]. Squadrons, 
Observ€{B,  f,j,  e,  k,  t)  A  Endurance{->B,  e,  k,  t)  >  0)) 

Condition  II: 

(3m,  1  <rn<  NCmsgs[->5],  (-'A/zmp(-i5,  e,  m,  t))  A  Mz'mp(-'5,  e,  m,  Mainloop)A 
Army[->5, e]. Squadrons  >  Cmsgs[-'5, mj.msg.Squadrons)) 

Condition  III:True 
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1.10;  Restriction  that  SquadIntensity>0 
Condition  I: 

(  €  {true,  false}, NArmy[5]  >  OA 

(3^,^  €  {l...NArmy[5]},  Army[5,5r]. Squadrons  >  0 
A(3i,J  e  {l..Army[5,^]. Squadrons}, 

Condition  II: 

Army[B,5'].SquadIntensity[ji]  <  0))) 

Condition  IIItTrue 

1.11:  Restriction  that  FixSuppl  >  0 

Condition  I: 

(  35,  B  €  {true,  false},  NArmy[5]  >  OA 
(3^,^  €  {l...NArmy[5]},  Army[5,5]. Squadrons  >  0 

Condition  II: 

Army[5, 5]. FixSuppl  <  0)) 

Condition  III:True 

1.12:  Segmentation  fault  when  squadron  leaves  Terrain  grid 

Condition  l:Active{B,g) 

Condition  II: 

(3j,l  <  y  <  Army[5, ^]. Squadrons,  £’ndurance(5, 5,  j,Mainloop)  >  OA 

(-^s,5j(Mainloop)  <  0  V  A’B,jj(Mainloop)  >  Params.XDelta  x  MaxTerrainV 
}  B,3j(Mainloop)  <  0  V  i'B,jj(Mainloop)  >  Params.YDelta  x  MaxTerrain)) 

Condition  III:True 

1.13:  Weapon  use  functions  misordered 

Condition  I: 

35,5,  Active(B,  g)  A  Active{->B,  e)A 

(3/:,  1  <  /:  <  Army[-i5,  e]. Squadrons,  Endurance{-'B ,  e,  k,  Mainloop)  >  OA 
(3j,  1  <  j  <  Army[5, 5]. Squadrons,  06serve(5, 5,  j,  e, Mainloop  —  1))) 

Condition  II:True 
Condition  III: 

{k'  I  (3J,  06sert;e(5, 5,  j,  e,  Mainloop))} 

^  {k"  I  (3j,  06serue(5, 5,  jf,  e,  A:",  Mainloop  —  1))}A 

(3j,  1  <  7  <  Armj’[5, 5]. Squadrons,  5ndurance(5, 5,  ji.  Duration)  >  0)A 

(3^’,  1  <  k  <  Army[-'5,  e]. Squadrons,  5ndurance(->5,  e,  i’.  Duration)  >  0) 


15 


1.14:  Observation  list  reversed,  causes  error  in  firing 

and 

1.15:  Unneccesary  addition  of  one  to  target  list  subscript  in 
arguments  to  SetLLCoords 

and 


1.16:  Unneccesary  adding  of  one  to  weapon  subscript  in  argu 
ments  to  SetLLCoords 

and 

1.26:  Improper  targeting  due  to  misordered  observation  list 

Condition  I: 

Active{B.  g)  A  Aciive{-‘B,e)A 

1  <  k  <  Army[-'B,  e]. Squadrons,  jEndurance(-'B,  e, Duration)  >  OA 
(3j,  1  <  i  <  Ariny[5, ^]. Squadrons,  jE^ndura7zce(B,^,j,Mainloop)  >  OA 
06serue(B,5r,  j,  e,  A-,  Mainloop  —  1)))  A  Params.NumWTypes  >  1 

Condition  II; 

(3A’',  1  <  k'  <  Army[-'B,  e]. Squadrons,  £’n(iurance(-'B,  e, Mainloop  —  1)  >  OA 
{3j,  Observe{B,  g,j,  e,  k\  Mainloop  —  1))A 

(^-B,e,jt'(Mainloop)  7^  x^B,e,jt(Mainloop)  V  t/^B,e,;t'(Main]oop)  7^  j/^B,e.fc(Mainloop))) 

Condition  III: 

I  {k  3  (3j.  06seri’e(B,^,j.  e,  A’,  Mainloop))}  |> 

min(Army[i?,^].\\eapPriority[e,  1],  NumW  eapon{B ,  g ,  1,  Mainloop))A 
(Army[B,^].\Veapon[l]. Damage  7^  Army[B,5'].Weapon[2].DamageV 
Arnij^-iB,  e].WeapSensativity[l]  7^  Army[->B,  e].WeapSensativity[2])A 
(^m,  1  <  m  <  NCmsgs[-'B], 

A/ nnp{-'B,  e,  777  ,  Duration)  A  -'A/7777p(-'fi,  e,  m,  Mainloop)) 
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1.17:  Accepts  Army.Squadrons=0  as  valid  data 

Condition  I: 

{3B,B  G  {true,  false),  NArmy[B]  >  0 

Condition  II; Army[B,(7]. Squadrons  =  0) 

Condition  IIIrTrue 

1.18;  TerrMoveTM  returns  unstable  value  if  battalion  leaves 
terrain  grid 

Condition  l:Active{B,g) 

Condition  II: 

(A^B,j(Mainloop)  <  0  V  A'’B,5(Mainloop)  >  Params.XDelta  x  MaxTerrainV 
^(Mainloop)  <  0  V  y^_p(Mainloop)  >  Params.YDelta  x  MaxTerrain) 

Condition  III: 

Duration  >  MainloopA 

(^?,1  <i  <  l\Cmsgs[B],  Mimp{B,g,i, Duration)  A -<AIimp{B,g, i^Mamloop  —  1)) 


1.19:  NumCas  not  cleared  by  command  message 

Condition  I: 

Aciive[B^  g)A 

(3?,  1  <i<  KCmsgs[B],Mimp{B,g,i,Mam\oop)  A  5,  a,  Mainloop  —  1)) 

Condition  II: 

1  ^  Army[B,p]. Squadrons,  Ca5ua/^y(S,p,j,  Mainloop) 

Condition  III:True 
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1.20:  NW>0  when  KF<0 

Condition  I: 

Active{B,  g)  A  NArmy[-'5]  >  0  A  Params.KumWTypes  >  OA 
(3?,  1  <  i  <  Params.NumWTypes, 

(  Army[B,5'].Weapon[2].NumWeapon  >  0)A 
(  Army[5,p].Weapon[i].UseLimit  >  0)A 
(  Army[B, p].Weapon[t]. Range  >  0)A 
(3e,  1  <  e  <  NArmy[-i5],  Army[-iB,  e]. Squadrons  >  OA 

{3k,  1  <  k  <  Army[->5,  e]. Squadrons, 

{3j,  1  <  i  <  Army[B,^]. Squadrons, 

£’ndi£rance(-iB,  e,  A:,  Mainloop)  >  OA 
Endurance{B,g,j,M&in\oop)  >  OA 

Observe{B,g,j,  e,  k,  Mainloop  —  1)  A  InRange{B ,  g,  i,  e,  k,  Mainloop) 

Condition  II:(Army[5,  ^].Weapon[t].FireRate  <  0) 

Condition  III: 

(Army[5,  ^].Weapon[z]. Damage  /  0)  A  (Army[-'5,  e].WeaponSensativity[z]  >  0)A 
(Duration  >  Mainloop)A 
(^r,  1  <  r  <  NCmsgsf-iB], 

Mimp{-<B,  e,  r.  Duration)  A  -'Mimp{-‘B,  e,  r,  Mainloop  —  1)))) 
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1.22:  Report  Message  processed  ahead  of  command  message 
with  equal  priority,  receipt  time 
Condition  I: 

Active[B,  g)  A  Active{-iB,  e)  A  Aciive{B,  f)A 

(3r,  1  <i<  NCmsgs[B],  A/imp(B,5,i,Mainloop)  A i,  Mainloop  —  1)A 
Army[B, /]. Report  =  g  A  (3t,  1  <  t  <  Duration, 

{t  =  Mainloop  —  Army[5,  p].ProcDelay  —  Army[B,p].MediaDelay 

—  Army[5, /].SendRate  —  1)A 

(3fc,  1  <  ^  <  Army[->B,  e]. Squadrons,  Endurance{-<B,  e,  k,  t)  >  OA 

3i,  1  <  Army[5, /]. Squadrons,  06serue(B, /,y,  e,  A:,  t))) 

Condition  II:Army[5, /]. Priority  =  Cmsgs[5,  z]. Priority 
Condition  III: 

/NCmsgs[B]  f  1  if  m,  Mainloop)  A  -iil/zmp(5,p,  m,  Mainloop  —  1)\ 

y  m=i  1^0  otherwise/ 

>  A'^umProce5s(B,  p,  Mainloop)) 


1.23:  Invalid  width,  height  when  squadron  leaves  grid 

Condition  l:Active{B,g) 

Condition  II: 

(3j,l  <  i  <  Army[5,5].Squadrons,£’ndurance(B,  p,/,  Mainloop)  >  OA 

(A'B_jj(Mainloop)  <  0  V  A’b,pj (Mainloop)  >  Params.XDelta  x  MaxTerrainV 
I  B.5,j(^^lainloop)  <  0  V  V's^^^j/Mainloop)  >  Params.YDelta  x  MaxTerrain)) 

Condition  III: 

(/3z,  1  <  z  <  NCmsgs[5].  M imp{B , g .  z.  Duration)  A  -'Mimp{B,g,  z,  Mainloop  —  1)) 
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1.25:  Observations  and  Weapon  coordinates  cleared  by  com¬ 
mand  messages 
Condition  I: 

Active{B,  g)A 

(3i,  1  <i  <  NCmsgs[5],  5,  Mainloop)  A  ~^Mimp{B,g^i,Ma\n\oop  —  1)) 

Condition  II: 

Active{-'B,  e)A 

(3z,  1  <  i  <  Params.NumWTypes, 

(A^umiyeapon(5,g,z,Mainloop)  >  OA 
(Army[5,  g'].Weapon[i].FireRate  >  0)A 
(Army[5,5].Weapon[t].UseLimit  >  0)A 
(Army[5, S']. Weapon[i]. Range  >  0)A 
{3k,  I  <  k  <  Army[-iS,  e], Squadrons, 

{3j,  1  <i  <  Army [5, flf]. Squadrons, 

Endurance{-'B ,  e,  k,  Mainloop)  >  OA 
Endurance{B , g,  j,Main]oop)  >  OA 

Obseriit{B,g,j.  e,  k,  Mainloop  —  1)  A  lnRange{B,g,  i,  e,  k,  Mainloop  —  1) 


Condition  III: 


(Army[5,5].\Veapon[?]. Damage  7^  0)  A  (Army[-iS,  e].WeaponSensativity[i]  >  0)A 
(Duration  >  Mainloop  +  1)  A  (-'Casua/ty(-'B,  e,  Mainloop)) A 


Or  .  £^nc/'urance(-'B,e,/:,Mainloop)  — Dam age(-'B,e,/c, Mainloop) +Damaoe(-’B,e,fc,M^nJoop—l) 

•5  > - ^ 

(;Sr,  1  <  r  <  NCmsgs[-i5], 

e,  r.  Duration)  A e,  r,  Mainloop  —  1)))) 


A 
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1.27:  Enemy  instead  of  current  position  in  observation  jamming 

Condition  I; 

Aciive{->B,  e)  A  Active{B,g)A 
(3fc,l  <k<  Army[-'B,  e]. Squadrons, 

(3j,l  <i  <  Army [5,5']. Squadrons, 

Endurance{-iB ,  e,  Mainloop)  >  OA 

Endurance{B , g ,  j ,Ma.]n\oop)  >  0  A  BigEnough{B,g,j,e,k,i)  A  Clear{B,g,j,e,k,t) 

Condition  II: 


Params.SampleRate  >  2A 

(2:-.B,e(Mainloop)  ^  XB,a(Mainloop)V 
y-.B.e(Mainloop)  ^  j/B,a(Mainloop))A 
^93  =  a:B,s,j(<  -  1)  A  ygj  =  -  1)A 

xek  =  -  1)  A  yek  =  y^B,e,k{^  -  1)A 

aB/(Q^c^^efc,yefc)~Army[-^B,e].SquadIntensit^{^•] _ 

B  l(a’  fd  .xek.yek) 

Params.SampleRate 

y~^  ((H'^0(xe/:, yeAr, Mainloop)  x  Army[5,5].VWEffect) + 

n=l  _ 


NArmv[-'B] 

E 

e'  =  l 


0  if 


A X -,B -e' n loop  1)  Army[-'5,  e'j.ObsJamRadius 

(y-B,e'(Mainloop  -  1)  -  j/eA:)^  ^ 


/(x-,B,e'(Mainloop  —  1)  —  xeA')^+ 

(y-B,e'(^^ainloop  -  1)  -  yek^ 


Army  [-•  B ,  e' ] .  O  bs  J  am  Radi  US 

))  <Army[5, yj.ObsMinContrastfjj) 


X  Armyf-iB,  e'j.ObsJamEff  otherwise 


Condition  III:True 


1.28:  Allocated  fixing  exceeds  NumFixersxFixRate 

Condition  I: 

Activ€{B,  g)  A  (3j,  1  <  i  <  Army[5, 5]. Squadrons,  Casua//y(5, 5,  j,  Mainloop) 

Condition  II: 

(5ndurace(5,5,j,  Mainloop)  —  Army[5,5].Endurance[j])  > 

(Army[5,5].FixRate  x  A'^umFtx(5, 5,  Mainloop) 

Condition  III: 

(5ndurance(5,5,j,  Mainloop)  +  Army[5,5].FixRate  x  A'^umFix(5, 5,  Mainloop)) 
^  Army[B,g].Enduranc€[i]  ^ 

(^m,l  <  m  <  NCmsgs[5],  5, m.  Duration)  A -I 5,  m,  Mainloop)) 
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Failure  Regions  in  Version  2 


2.1;  No  check  if  report  message  destination  is  existing  battalion 

Condition  I: 

Active{B^  g)  A  Aciive{-'B,  e)  A 
(3fc,l  <  k  <  Army[-'B,  e]. Squadrons, 

(3j,  1  <  ji  <  Army[5,p]. Squadrons, 

(3f,l  <t  <  Mainloop, Observe{B,g,j,e,k,t)))) 

Condition  11:0  >  Army[5,  <7]. Report  V  NArmy[B]  <  Army [B,  5]. Report 
Condition  III:True 

2.2:  No  check  if  command  message  destination  is  existing  bat¬ 
talion 
Condition  I: 

Duration  >0A3t,l<t<  Duration, 

3B,B  E  {true, false), NArmy[5]  >  0 

Condition  II: 

3r7?,  1  <  m  <  NCmsgs[B],  Cmsgs[B,  77?].Time  =  tA 

Cmsgs[B,  mj.Army  =  B  A  (Cmsgs[B,  mj.Dest  <  0  V  Cmsgs[B,  mj.Dest  >  NArmy[B]) 
Condition  III:True 

2.3:  Message  not  queued  for  processing  in  next  dt 

Condition  I: 

Active{B,  g)  A  {3m,\  <  rn  <  NCmsgs[B],  RecT{B,  g,m)  =  Mainloop 

Condition  II: 

C mdSum{B,  g,m,  Mainloop)  +  ReptSum{B,  5,  m,  Mainloop) 

=  A^umProcess{B,g,Msim\oop  —  1) 

Condition  III:True 
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2.4:  Improper  count  of  available  receivers 

Condition  I: 

Active{B^g) /\3j,\  <j<  Army[B,  ^]. Squadrons,  C'a5ua/tt/(5,  p,ji,  Mainloop) 

Condition  II: 

Mainloop)  ^  NumRec{B,  g^M&inloop  —  1) 

Condition  III: 

3m,  1  <m<  NCmsgs[B],  Cmsgs[B,5].Dest  =  g  A  RecT{B,g,m)  =  Mainloop 


2.5:  Incomplete  recalculation  when  command  implemented 

Condition  I: 

Active{B,  g)  A  {3m,l  <m  <  NCmsgs[S],  Mtmp(5,  m,  Mainloop)) 

Condition  II: 

(3e,  1  <  e  <  NArmy[-'B],  Army[-iB,  e]. Squadrons  >  OA 

3kA  ^  k  <  Army[-'S,  ej. Squadrons,  £'ndurance(-iB,  e,  I',  Mainloop)  >  OA 

3i,  1  <  Army[B, 5]. Squadrons, 

£'ndurance(5,5',j,  Mainloop)  >  0  A  Observe{B,g,j,€,  k,M&m\oop  —  1)) 
VArmy[5,^].NumReceive  7^  Cmsgs[5,  mj.msg.NumReceive 

Condition  III: 

(3m',  1  <  m'  <  NCmsgs[B],  il/tmp(5,p,  m.  Duration)  A -'Mimp(5, 5,  m,  Mainloop)) 
V(3?,l  <i<  Params.NumWTypes, /rji?an^e(5,  z,  e, Mainloop)) 
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2.6:  Program  fails  when  squadron  exceeds  Terrain  boundaries 

and 

2.31:  Use  of  borders  to  initialize  w,h  calculation  causes  problems 
Condition  I:(Duration  >  0) 

Condition  II: 

3B,  g,Active(B,  g)/\ 

(Xs,5(Mainloop)  >  Params.XDelta  x  MaxTerrainV 
yB,5(Mainloop)  >  Params.YDelta  x  MaxTerrain) 

Condition  IIIrTrue 

2.7:  Wrong  points  checked  in  subtended  angle  calculation 
Condition  I: 

Active(B,  g)  A  Active{->B,€)/\ 

3j,l  <j<  Army[B,  51]. Squadrons,  £ndurance(5,^,j,  Mainloop)  >  OA 
31’,!  <k<  Army[-'B,  e], Squadrons,  £ndurance(-i5,  e, Mainloop)  >  0 

Condition  II; 

(A's,5.i(Mainloop  -  1)  >  AYs,e,fc(Mainloop  -  1)  +  Arm.vhB.e]^SquadWidth^ 
yfl,,.,(Mainloop  -  1)  <  Ks,e,)t(Mainloop  -  1)  +  ^I^Xhg.eJ-SquadLens.h 

Condition  III: 

Army[->B,  e].SquadWidth  >  0  A  -<Observe{B,g,j,  e,  Ar,  Mainloop)A 
Clear{B,  g,j,  e,  k,  Mainloop)  A  Obvious{B,g,j,  e,  k,  Mainloop)A 
(Vf,  1  <  t  <  Duration, 

1  <  j'  <  Army[B,5']. Squadrons,  Endurance(B,  g,j\t)  >  OA 
3A'',  1  <  k'  <  Army[->B,  e].Squa.dvons,  Endurance{-<B,e,k\t)  >  OA 
Observe{B,g,j',  e,  k',t)) 
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2.8:  Calculates  the  wrong  angle  if  Observer,  two  corners  are 

colinear 

Condition  I: 

Active{B,  g)  A  Active{->B,  e)A 

1  <  Army[B,  5]. Squadrons,  £^ndurance(B,^,j,  Mainloop)  >  OA 

3Ar,  1  <  k  <  Armyf-iB,  e]. Squadrons,  £'n<furance(->5,  e,  Mainloop)  >  0 

Condition  II: 

((yB.,.i(MainloOp  -  1)  =  KB.,.,(Mainloop  -  1)  +  A^yh^-d-SquadLength^^ 
(yB.,,,(Mainloop  -  1)  =  KB.e,it(Mainloop  -  1)  - 

I  XB.,j(Mainloop  -  1)  -  AT.B.e.UMainloop  -  1)  |<  An??yhB.e]^Squad Width 
Condition  III: 

Army[->B,  ej.SquadWidth  >  0  A  -'Observe{B ,  g ,  j ,  e,  k,Ma.m\oop)A 
Clear{B,  g,j,  e,  k,  Mainloop)  A  Obvious{B,g,j,  e,  Mainloop)A 
(Vf,  1  <  t  <  Duration, 

/Si',  1  <  j'  <  Army[B, 5']. Squadrons,  £'ndurance(B,5',i',t)  >  OA 
3/:',!  <  k'  <  Army[-i5,  e]. Squadrons,  £'ndurance(-i5,  e.  A-',  t)  >  OA 
Observe{B,  g,  f,  e,  k',  t)) 


2.10:  No  check  ifParams.XDelta  =  0 
Condition  I:True 
Condition  II:Params.XDelta  =  0 
Condition  III:True 

2.11:  No  check  if  Params.YDelta  =  0 
Condition  I:True 
Condition  II:Params.YDelta  =  0 
Condition  III:True 

2.12:  No  check  if  Params.SampleRate  <  2 
Condition  I:True 

Condition  II:Params.SampleRate  <  2 
Condition  III:True 
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2.13:  Infinite  velocity  if  EO  =  0 

Condition  I: 

Duration  >  0  A  3B,B  E  {true, false}, NArmy[B]  >  OA 
3g,  1  <  g  <  NArmy[B],  Army[B,  5]. Squadrons  >  0 

Condition  II: 1  <  j  <  Army[5,5'].Squadrons,  Army[B,5].Endurance[j]  >  0 
Condition  III: 

{j5i,  I  <  i  <  NCmsgs[j5],  S',  i.  Duration)  A  -^M imp{B,  g,i,  Mainloop  —  1)) 


2.14:  No  check  if  Army.NumFixers  >  Army.Squadrons 

Condition  I:(Duration  >  0) 

Condition  II: 

{3B,B  E  {l...NArmy[true]}, 

Army[true,  Bj.NumFixers  >  Army[true,  j5].Squadrons)V 
{3B,B  E  {l...NArmy[false]}, 

Army[false,  Bj.NumFixers  >  Army[false,  B]. Squadrons) 

Condition  III:True 

2.15:  No  check  if  Army.Num Jammers  >  Army.Squadrons 

Condition  I:(Duration  >  0) 

Condition  II: 

(3B,B  E  {l...NArmy[true]}, 

Army[true,  B].NumJammers  >  Army[true,  B].Squadrons)V 
(3B,B  G  {l...NArmy[false]}, 

Army[false,  Bj.Num Jammers  >  Army[false,  B]. Squadrons) 

Condition  III:True 

2.16:  No  check  if  Army.NumProcess  >  Army.Squadrons 

Condition  I:(Duration  >  0) 

Condition  II: 

(3B,B  G  {l...NArmy[true]}, 

Army[true,  Bj.NumProcess  >  Army[true,  B].Squadrons)V 
(3B,B  G  {l...NArmy[false]}, 

Army[false,  Bj.NumProcess  >  Army  [false,  Bj. Squadrons) 

Condition  III:True 
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2.17;  No  check  if  Army.NumReceive  >  Army. Squadrons 

Condition  I:(Duration  >  0) 

Condition  II: 

(35, B  €  {l...NArmy[true]}, 

Army[true,  5].NumReceive  >  Armyftrue,  5]. Squadrons) V 
(35,5  G  {l...NArmy[false]}, 

Army[false,  5].NumReceive  >  Army[false,  5]. Squadrons) 

Condition  IIIrTrue 

2.18:  No  check  if  Army.NumSend  >  Army.Squadrons 

Condition  I:(Duration  >  0) 

Condition  II: 

(35,5  €  {l...NArmy[true]}, 

Armyftrue,  5].NumSend  >  Army[true,  5].Squadrons)V 
(35,5  G  {l...NArmy[false]}, 

Army[false,  5].NumSend  >  Army[false,  5]. Squadrons) 

Condition  III:True 

2.19:  No  check  if  Cmsgs.msg.NumFixers  >  Cmsgs.msg. Squadrons 

Condition  I: 

35.  5  G  {true, false), 

(3/,l  <  /  <  NArmy[5], 

(3m,  771  G  {l...NCmsgs[5]},  il/imp(5, /,  m.  Duration))) 

Condition  II: 

Cmsgs[5,  r7i].Msg.NumFixers  >  Cmsgs[5,  m]. Msg. Squadrons 
Condition  IIIrTrue 

2.20:  No  check  if  Cmsgs.msg. NumJammers  >  Cmsgs.msg. Squadrons 

Condition  I: 

35,  5  G  {true, false), 

(3/,l  <  /  <  NArmy[5], 

(3m,  m  G  {l...NCmsgs[5]),  iV/imp(5, /,  m.  Duration))) 

Condition  II: 

Cmsgs[5,  m].msg. NumJammers  >  Cmsgs[5,  mj.msg. Squadrons 
Condition  IILTrue 
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2.21:  No  check  if  Cmsgs.msg.NumProcess  >  Cmsgs.msg. Squadrons 

Condition  I: 

3B,  B  6  {true, false}, 

(3/,l  <  /  <  NArmy[5], 

(3m, m  6  {l...NCmsgs[B]},A/imp(B,/,m, Duration))) 

Condition  II: 

Cmsgs[5,  m].msg.NumProcess  >  Cmsgs[B,  mJ.msg.Squadrons 
Condition  IIItTrue 

2.22:  No  check  if  Cmsgs.msg. NumReceive  >  Cmsgs.msg. Squadrons 

Condition  I: 

3B,  B  6  {true, false}, 

(3/,l  <  /  <  NArmy[5], 

(3m,  m  6  {l..,NCmsgs[5]},  Mfmp(5, /,  m.  Duration))) 

Condition  II: 

Cmsgs[B,  m].msg. NumReceive  >  Cmsgs[5,  mj.msg. Squadrons 
Condition  III:True 

2.23:  No  check  if  Cmsgs.msg. NumSend  >  Cmsgs.msg. Squadrons 

Condition  I: 

35,  B  G  {true, false}, 

(3/,l  <  /  <  NArmy[5], 

(3m,  m  G  {l...NCmsgs[5]},  Mfmp(5, /,  m.  Duration))) 

Condition  II: 

Cmsgs[5,  m].msg. NumSend  >  Cmsgs[5,  mj.msg. Squadrons 
Condition  III:True 
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2.25:  Multiple  Reports  processed  in  queue  order 

Condition  I: 


Active{-‘B,  e)  A  Active{B,g)  A  Active{B,f)  A  Active{B,  f)  A  f  ^  f'A 
3^',  1  <  k  <  Army[-'B,  e]. Squadrons,  (£^ndurance(-'B,  e,  Mainloop)  >  0)A 
(3t,  t  =  Mainloop  —  ArmyfjB,  /l.SendRate  —  Army[S,p].MediaDelay— 

-  Army[B,^].ProcDelay 

1  <  Army[B, /]. Squadrons,  jBndurance(B, >  0  A  Observe{B,  f,j,e,k,t))A 

=  Mainloop  —  RepT{B,  f',g)  —  Army[B,5].ProcDelay 

_ Anny  [B  .  RecRate _ 

A’^umBec(B,p,Mainlooj>- Army[B  ,p].ProcDelay) 


3i',  1  <  i'  <  Army[B,/']. Squadrons,  Endurance{B,  >  0 

AObserve{B,  /',  j\  e,  k,  P)) 


Condition  II: 


Army[B, /]. Priority  >  Army[B, /'].PriorityA  . 
Army[B, /j.SendRate  >  Army[B, /'j.SendRate 


Condition  III: 

(3i,  1  <i<  Params.NumWTypes,  InRange{B,g,i,e,k,}^l&m\oop+  1))A 
(Vt,  1  <  ^  <  Duration, 

/Si',  1  <  j'  <  ATmy[B,g].SqudidTons,Endurance{B,g,j',t)  >  OA 
3fc',  1  <  k'  <  Armj’[-i5,  e], Squadrons,  £n(iura7ice(-'B,  e.  A:',  <)  >  OA 
Observe{B,gJ',e,k\i)) 


2.26:  gold  observes  when  version  does  not 

Condition  l:Aciive{B,g)  A  Active{->B^e) 

Condition  II: 

SomeObserve{->B,  e,g,  2)  A  (3m,  1  <  m  <  NCmsgs[B],  Mimp{B^  g,m,  1)) 
Condition  II:True 

2.30:  Alt  poorly  defined  when  battalion  leaves  terrain  grid 

Condition  I:(Duration  >  0) 

Condition  II: 

3B,  g,Active{B,g)A 

(A'^B,s(l^Iainloop)  <  0  V  (Mainloop)  <  0) 

Condition  III:True 
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Failure  Regions  in  Version  3 


3.1:  Improper  count  on  number  of  busy  processors  in  procedure 

ReceiveMessages 

Condition  I: 

{3B,  {3f,Active{B,  /) A 

(Army[5, /j.NumReceive >  0)A 
(NCmsgs[B]  >  0)A 

(3i,  1  <  I  <  NCmsgs[B],  PTR'.CMessage  =  i))) 

A(PTR  ^  nil)  A  (PTR‘.DestArmy  =  B)  A  (PTR'.DestBatt  =  /) 

Condition  II:(PTR'. Processed  =  reed)  A  (PTR'.TimeRecd  =  Mainloop) 

Condition  III: 


A/“.next=null 

E 

A/=HeadQueue 

\  [0  otherwise 

>  Army[B, /j.NumProcessA 


if  Best  Army  =  B)  A  (il/‘.DestBatt  =  f)A  \ 

(M*. Processed  =  reed)  A  (i\/‘.TimeRecd  >  Mainloop) 


/ 


1  if(i\/EDestArmy  =  B)  A  (il/‘.DestBatt  =  f)A  \ 

(A/*. Processed  =  reed)  A  (i\/'.TimeRecd  >  Mainloop) 


A/‘.next=rul 

E 

A/=HeadQueue 

1,0  otherwise 
<  Army[B, /j.NumProcessA 
{3M,M  6  {HeadQueue, nil}, 

(il/'.DestArmy  =  B)  A  (7l/‘.DestBatt  =  f)A 

(il/*. Processed  =  arrvd)  A  (il/‘.TimeSent  <  Duration))V 

M  €  Cmsgs[5],  (il/.Dest  =  /)  A  (A/. Time  >  Mainloop)A 
(il/.Time  <  Duration  A  (il/.mesg  CMsgs[B][PTR'.CMessage]))) 


/ 
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3.2:  Violation  of  queue  structure  when  messages  of  equal  priority 
are  ready  for  processing 
Condition  I: 

Active(B,  f)  A  (Army[5, /j.NumReceive  >  0)A 

(NCmsgs[B]  >  0)  A  (3t,  1  <  t  <  NCmsgs[S],  Rec'.CMessage  =  i)A 

(HeadQueue  ^  nil) 

(  3M,M  G  {HeadQueue. ..nil), 

(M'.CMessage  ^  Rec".CMessage)A 
(M‘.DestArmy  =  B)  A  (M'.DestBatt  =  /)) 

Condition  II:(3place,  place  G  {HeadQueue.. .nil},  place". priority  <  Rec". priority) 
Condition  III:True 

3.3:  Message  implemented  in  destroyed  battalions  in  procedure 

FollowCommandMessages 

Condition  I: 

(  Duration  >  0)  A  (Mainloop  G  {0... Duration}) 

A(((H  =  True)  A  (NArmy[H]  >  0)  A  (/  G  {l...NArmy[B]})A 
(Army[B, /]. Squadrons  >  0)A 
(Army[H, /j.NumReceive >  0)A 
(3i,  1  <  i  <  Army[B, /]. Squadrons, 

£’ndurance(B, /,  i,  Mainloop)  >  0)A 
(NCmsgs[H]  >  0)A 

(32,1  <  i  <  NCmsgs[B],  Match". CMessage  =  t))V 
((H  =  False)  A  (NArmy[5]  >  0)  A  (/  G  {l...NArmy[H]})A 
(Army[B, /]. Squadrons  >  0)A 
(Army[H, /j.NumReceive  >  0)A 
(3i,  1  <  2  <  Army[B, /]. Squadrons, 

£'ndurance(.B, /,  2,  Mainloop)  >  0)A 
(NCmsgs[B]  >  0)A 

(32, 1  <  2  <  NCmsgs[Bj, Match". CMessage  =  2))) 


1  if  Endur ance{B ,  f,  s,Ma.in\oop)  <  0 
0  otherwise 


AMatch  ^  NIL 


Condition  II: 


Army[H, /]. Squadrons  —  K  <0 
Condition  III:True 
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3.4:  Initial  Endurance  <=  0  reported  erroneous  in  command 

messages 

Condition  I: 

3B,  B  €  {true, false}, 

(3/,I  <  /  <  NArmvlBl, 

(3m,  m  €  {l...NCmsgs[5]},  A/zmp(5, /,  m.  Duration))) 

Condition  II: 

1  <  J  <  Cmsgs[B,  m].Msg.Squadrons,  Cmsgs[S, m].Msg.Endurance[s]  <  0 
Condition  IIIiTrue 

3.5:  Initial  velocity  counted  incorrect  if  Endurance  <=  0 
Condition  I: 

(ArmyNum  6  {true, false})  A  (Batt  6  {l...NArmy[ArmyNuin]})A 
(Army[ArmyNum,  Batt]. Squadrons  >  0) 

Condition  II: 

(3s,s  6  {l...Army[ArmyNum,  Batt]. Squadrons}, 

Army[ArmyNum,  Battj.Endurancels]  <  0)A 
(3i,i  €  {l...Army[ArmyNum,  Batt]. Squadrons},  Army[ArmyNum,  Batt). V0[i]  ^  0) 

Condition  III: 

6  {l...Army[ArmyNum,  Batt]. Squadrons}, 

(Army[ArmyNum, Batt].V0[s']  < 

Army  [ArmyNum,  Batt].V0[s])A 
(Arm3'[ArmyNum, Batt].Endurance[s']  <  0)) 

((  Duration  =  0)V 

(  {l...NCmsgs[ ArmyNum]}, 

A/7mp( ArmyNum,  Batt,  m.  Duration))) 
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3.6:  Array  range  violations  in  BatPosition  lead  to  setting  of 
wrong  battalion’s  squad  positions 
Condition  l:3B,3g,Active{B,g) 

Condition  II: 

£^ndtirance(^, 5,  Army[^, 5]. Squadrons,  Mainloop)  <  0 
Condition  III:True 

3.7:  KU  equations  not  supported 

and 

3.8:  dNK  equations  not  supported 

Condition  I: 

{3B,{3g,  Active{B,  g)A 

(Params.NumWTypes  >  0))) 

(3i,  1  <  ?  <  Params.NumWTypes, 

(Army[.B, ^].Weapon[?].NumWeapon  >  0)A 
(Army[5, 5].Weapon[i].FireRate  >  0)A 
(Army[.B,5].Weapon[i].UseLimit  >  0)A 
(Army[.B, 5].Weapon[z].Range  >  0)A 

(3e,  1  <  e  <  NArmy[-'5], 

(3/c,  1  <  A:  <  Armyf-iB,  e]. Squadrons, 

(3j,  1  <  j  <  Army[.B, 5]. Squadrons, 

£'n<iiirance(-i.S,  e, Mainloop)  >  OA 
Endurance{B,  g,j,  Ma.m\oop)  >  OA 

Observc{B ,  g,  j,  e,  k,  Mainloop)  A  lnRange{B,  g,  ?,  e,  k,  Mainloop) 

)  )  )) 


Condition  II:True 
Condition  III: 

(^m,l  <m  <  NCmsgs[.B],  p,  m,  Duration) A 

-<Mimp{B,  g,  m,  Mainloop)) 
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3.9:  Wrong  Sx,Sy  used  in  calculation  of  K 

Condition  I: 

Active(B,  g)  A  Active{-iB ,  e)A 
(3i,  I  <  i  <  Params.NumWTypes, 

(Army[B,  ^].Weapon[z].NumWeapon  >  0)A 
(Army[B,  ^].Weapon[j].FireRate  >  0)A 
(Army[5,  ^].Weapon[i].UseLiinit  >  0)A 
(Army[B,  Sf].Weapon[i]. Range  >  0)A 


{3k,  I  <  k  <  Army[-'B,  e]. Squadrons, 

(3j,  1  <  j  <  Army[5,5r]. Squadrons, 

Endurance{-<B ,  e,  k,  Mainloop)  >  OA 
£ndurance(5,p,  j,  Mainloop)  >  OA 

Observe{B,g,j,  e,  k,  Mainloop)  A  InRange{B,g,  i,  e,  k,  Mainloop)  A 
xek  =  x-,B  e  *:(Mainloop  —  1)  A  yek  =  j/-,b  e  *;(Mainloop  —  1) 

)  )  ” 

Condition  II:(Army[5,5f].X  ^  xek)  A  (Army[B,5'].Y  7^  yek) 

Condition  III: 

(Duration  >  Mainloop  +  1)  A  Casualty{->B,  e,  k,  Mainloop  +  1)A 

Endurance{->B ,  e,  k,  Mainloop)  +  Damage{->B ,  e,  k,  Mainloop)— 

Dama^e(-'B,  e,  A:,  Mainloop  —  1) 

Army[->B,  e].Endurance[A'] 

A(^m,l  <  m  <  NCmsgs[-'5],  e,  m.  Duration)  A e,  m,  Mainloop))) 


3.10:  Duration=0  considered  erroneous 
Condition  I:Tiue 
Condition  II:Duration  =  0 
Condition  IIIrTrue 
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3.11:  M>MaxTerrain  instead  if  M>=MaxTerrain  in  findA 

and 

3.20:  N>MaxTerrain  instead  if  N>=MaxTerrain  in  findA 

Condition  I:(Duration  >  0) 

Condition  II: 

3B,  g,Active{B,  g)A 

A'’B,3(Mainloop)  =  Params.XDelta  x  MaxTerrain  [for  3.11]V 
yB_j(Mainloop)  =  Params.YDelta  x  MaxTerrain  [for  3.20]) 

Condition  IIIrTrue 

3.12:  TM  undefined  when  Dist=0 

Condition  l:Active{B ,g) 

Condition  II:V(5,5',  Mainloop)  =  0 
Condition  III: 

(Duration  >  Mainloop)A 
(xB,p(Mainloop)  /  ^•^^^(Mainloop  —  1)V 
?/B,p(Mainloop)  ^  ^^^^(Mainloop  -  1)) 

A(^m,  1  <  m  <  NCmsgs[B],  m,  Duration)  A  -‘Mimp{B,g,m,  Mainloop)) 


3.13:  Observation  from  side  uses  wrong  points  in  angle  calcula¬ 
tion 

Condition  I: 

Active{B.,  g)  A  Active{-'B,  e)  A 

(3j,  1  <  j  <  Army[5, 5]. Squadrons,  (3i’,  1  <k<  Armyl-i^,  e]. Squadrons, 

(  a’B,5,j(Mainloop  —  1)  >  a:-,B,e,it(Mainloop  —  1)A 
i/B,sj(Mainloop  -  1)  =  y^B,e,fc(Mainloop  -  1))V 
(  3:B,ff,j(Mainloop  —  1)  <  x_,B,e,t(Mainloop  —  1)A 
2/B,flj(^iai^loop  -  1)  =  ?/^B,e,fc(Mainloop  -  1))V 
(  XB,5,j(Mainloop  —  1)  =  x-,B,e,fc(Mainloop  —  1)) 

Condition  II:Army[-'B,  e].SquadLength  >  0  V  Army[-i5,  ej.SquadWidth  >  0 
Condition  III: 

Clear{B,  g,j,  e,  k,  Mainloop)  A  Obvious{B,g,j,  e,  k,  Mainloop))) 
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3.15:  Assumes  that  velocity  never  exceeds  99999 
Condition  IrDuration  >  0 
Condition  II; 

3B.,g,B  €  {true,  false),  I  <  g  <  NArmy[B], 

(3s,  1  <  s  <  Army[B,^]. Squadrons, 

Enduranc€{B, g,s,Ma.m\oop)  >  0  A  Army[B,^].V0[s]  >  99999)V 
(3m,  1  <m<  NCmsgs[B],  Mimp(B,^,  m,  Duration) A 
(3s,  1  <  s  <  Cmsgs[B,  m]. Msg. Squadrons, 

Cmsgs[B,  m].Msg.Endurance[s]  >  0  A  Cmsgs[B][m].Msg.VO[s]  >  99999)) 
Condition  III:True 

3.16:  SegViolation  in  FindA  when  battalion  leaves  defined  ter¬ 
rain 

Condition  I:(Duration  >  0) 

Condition  II: 

3B,  g,Activ€{B,  g)A 

(A^B,p(Mainloop)  >  Params.XDelta  x  MaxTerrainV 
lB,ff(Mainloop)  >  Params.YDelta  x  MaxTerrainV 
^B,s(Mainloop)  <  0  V  lB,g(Mainloop)  <  0) 

Condition  III:True 

3.17:  Result  variables  not  set  if  Duration<0 

Condition  I;True 

Condition  II:(Duration  <  0)  A  ((NArmy[true]  >  0)  V  (NArmy[false]  >  0)) 

Condition  IIItTrue 
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3.18:  N  undefined  in  WeaponsSighting  at  first  occurance 

and 


3.19:  M  undefined  in  WeaponsSighting  at  first  occurance 

Condition  I:(3B,  (3^,  Active{B,  g))) 

Condition  IltTrue 
Condition  III: 

(3i,  1  <  I  <  Params.NumWTypes, 

(Army[B,  ^].Weapon[i].NumWeapon  >  0)  A  (Army[5,p].Weapon[i].FireRate  >  0)A 
(Army[5,  ^].Weapon[i].UseLimit  >  0)  A  (Army[B,  p].Weapon[i]. Range  >  0)A 

(3e,  1  <  e  <  NArmy[-'5], 

(3fc,  1  <  <  Army[-'5,  e]. Squadrons, 

(3j,  1  <  i  <  Army[5,p]. Squadrons, 

Endurance{-'B,  e,k,Mainloop)  >  0  A  Endurance{B,g,j,  Mainloop)  >  OA 
Observt(B,g,j,  e,  k,  Mainloop)  A  InRaiige{B,  g,  i,  e,  k,  Mainloop))))) 


3.21:  Does  not  reject  NArmy<0 

Condition  I:(Duration  >  0) 

Condition  II:(NArmy[true]  <  0)  V  (NArmy[false]  <  0) 

Condition  III:True 

3.22:  Restoration  allotted  when  FS<0 

Condition  I:Ach'ue(B,5)A(3j,  1  <j<  Army[5, ^]. Squadrons,  Casua/<y(5,p,j,  Mainloop)) 
Condition  II:S'upp/(5,^,  Mainloop)  <  0 
Condition  III:True 
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3.23:  Messages  lost  if  NumProcess  goes  transiently  to  0 

Condition  I: 

Active{B,g)A 

(3m,  1  <m<  NCmsgs[5],  ((Cmsgs[5,  m].Time+ Army[B,5].MediaDelay 
+Army[5,  ^j.ProcDelay)  =  Mainloop)A 
(Cmsgs[J5,  mj.Dest  =  g)) 

Condition  II; 

0  =  A'^iimProce55(J5,^,  Mainloop) 

Condition  III; 

0  <  A^umProces5(B,  Mainloop  +  1) 

(3m',  1  <  m'  <  A^Cmsgs[5],  (-'Mzmp(5,^,  m',  Mainloop))  A  j’l/zmp(5,^,  m'.  Duration)) 

3.24:  Positions  not  initialized  when  Duration=0 

Condition  I; 

(ArmyNum  €  {true,  false})  A  (Batt  €  {l...NArmy[ArmyNum]})A 
(Army[Arm3'Num, Batt]. Squadrons  >  0) 

Condition  II;True 
Condition  III;(Duration  =  0) 

3.25:  Positions  centered  on  current,  not  previous,  battalion  x,y 

Condition  l:Acti  ve{B,g) 

Condition  II; 

(3j,l  <  i  <  Army[B,  ^f]. Squadrons, 

Army[5,^].V0[j']  >  0  A  £’ndurance(5,  ^,j,  Mainloop)  >  0) 

Condition  III;True 
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3.26:  Initally  destroyed  squadrons  not  in  “Killed” 

Condition  I: 

(ArmyNum  €  {true, false})  A  (Batt  €  {l...NArmy[ArmyNum]})A 
(Army[ArmyNum,  Batt]. Squadrons  >  0) 

Condition  II: 

(3s, s  €  {l...Army[ArmyNum, Batt]. Squadrons), 
Army[ArmyNum, Batt].Endurance[s]  <  0) 

Condition  III: 

((Duration  =  0)V 

(^m,m  €  {l...NCmsgs[ArmyNum]), 

M  fmp(ArmyNum,  Batt,  m.  Duration))) 


3.28:  FindA  returns  poorly  defined  value  if  X<0 

Condition  I: 

Active{B,  g) 

Condition  II: 

a'B,p(Mainloop)  <  OV 

(3i,  1  <  i  <  Army[B, pj. Squadrons,  a;B.5.i(Mainloop)  <  0 
Condition  III: 

^m,m  €  {L..NCmsgs[5]},  Mzmp(S,  m.  Duration) 


3.32:  Does  not  reject  Army.Squadrons=0 

Condition  I:(Duration  >  0) 

Condition  II: 

{3B,B  £  {l...NArmy[true]}, 

Arm}'[true,  Bj. Squadrons  =  0)V 
{SB,B  G  {l...NArmy[false]}, 

Armj'[false,  5]. Squadrons  =  0) 

Condition  III:True 
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3.33:  Does  not  reject  Army.NumFixers  >  Army.Squadrons 

Condition  I:  (Duration  >  0) 

Condition  II: 

(3B,5  €  {l...NArmy[true]}, 

Army[true,  5].NumFixers  >  Army[true,  B].Squadrons)V 
(3B,5  €  {l...NArmy[false]}, 

Army[false,  5].NumFixers  >  Army[false,  jB]. Squadrons) 

Condition  III:True 


3.34:  Does  not  reject  Army.NumJammers  >  Army.Squadrons 

Condition  I:(Duration  >  0) 

Condition  II: 

{3B,B  G  {l...NArmy[true]}, 

Army[true,  5].NumJammers  >  Army[true,  5].Squadrons)V 
{3B,B  G  {l...NArmy[false]}, 

Army[false,  JBj.NumJammers  >  Army[false,  JB]. Squadrons) 

Condition  III:True 

3.35:  Does  not  reject  Army.NumProcess  >  Army.Squadrons 

Condition  I:(Duration  >  0) 

Condition  II: 

(3B,B  G  {l...NArm3'[true]}, 

Army[true,  .Bj.NumProcess  >  Armj^ftrue,  .Bj. Squadrons) V 
{3B,B  G  {l...NArmy[false]}, 

Army[false,  Bj.NumProcess  >  Arm3'[false,  Bj. Squadrons) 

Condition  III:True 

3.36:  Does  not  reject  Army.NumReceive  >  Army.Squadrons 

Condition  I:(Duration  >  0) 

Condition  II: 

(3B,B  G  {l...NArm3'[true]}, 

Army[true,  B].NumReceive>  Army[true,  Bj. Squadrons) V 
(3B,B  G  {l...NArm}^[false]}, 

Armj’[false,  Bj.NumReceive  >  Arm3'[false,  Bj. Squadrons) 

Condition  III:True 
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3.37;  Does  not  reject  Army.NumSend  >  Army. Squadrons 

Condition  I:  (Duration  >  0) 

Condition  II: 

{BB,B  €  {l...NArmy[true]}, 

Army[true,  Bj.NumSend  >  Army[true,  B].Squadrons)V 
(3B,B  €  {l...NArmy[false]}, 

Armyffalse,  5].NumSend  >  Army[false,  5]. Squadrons) 

Condition  III:True 


3.38:  Does  not  reject  Cmsgs.msg.NumFixers  > 
Cmsgs.msg. Squadrons 
Condition  I: 

3B,  B  G  {true, false], 

(3/,l  <  /  <  NArmy[B], 

(3/77, m  6  {l...NCmsgs[5]}, M7777/)(S, /, m.  Duration))) 
Condition  II: 

Cmsgs[B,  mj.msg.NumFixers  >  Cmsgs[fi,m].msg. Squadrons 
Condition  III:True 


3.39:  Does  not  reject  Cmsgs.msg. NumJammers  > 
Cmsgs.msg. Squadrons 
Condition  I: 

3B,  B  £  {true, false), 

(3/,1  <  /  <  NArmy[5], 

(3m,  m  G  {l...NCmsgs[B]},  A/7mp(5, /,  m,  Duration))) 
Condition  II: 

Cmsgs[B,  mj.msg. NumJammers  >  Cmsgs[B,  mj.msg. Squadrons 
Condition  III:True 
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3.40:  Does  not  reject  Cmsgs.msg.NumProcess  > 
Cmsgs.msg. Squadrons 
Condition  I: 

3B,  B  6  {true, false}, 

(3/,l  <  /  <  NArmy[5], 

(3m, m  €  {L..NCmsgs[B]},  il/imp(B,/,m,  Duration))) 

Condition  II: 

Cmsgs[5,  m].msg.NumProcess  >  Cmsgs[B,  m].msg. Squadrons 
Condition  IIItTrue 


3.41:  Does  not  reject  Cmsgs.msg. NumReceive  > 
Cmsgs.msg. Squadrons 
Condition  I: 

3B,  B  6  {true, false), 

(3/,l  <  /  <  NArmy[B], 

{3m, m  G  {l...NCmsgs[B]},  Afimp(B, /, m, Duration))) 
Condition  II: 

Cmsgs[B,  mj.msg. NumReceive  >  Cmsgs[R,  m].msg. Squadrons 
Condition  III:True 

3.42:  Does  not  reject  Cmsgs.msg. NumSend  > 
Cmsgs.msg.  Squadrons 
Condition  I: 

3B,  B  G  {true, false), 

(3/,l  <  /  <  NArmy[B], 

{3m, m  G  {l...NCmsgs[B]),  i\/imp(B, /,  m.  Duration))) 
Condition  II: 

Cmsgs[B,  mj.msg. NumSend  >  Cmsgs[B,  mj.msg. Squadrons 
Condition  III:True 
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3.43:  Observes  when  SR<2. 

Condition  I: 


{3B,  3g,  Active{B,  g)/\ 

(3e,  1  <  e  <  NArmy[-'S], 

{3k,  I  <  k  <  Army[-iB, e]. Squadrons, 

{3j,  1  <  i  <  Army[B, 5]. Squadrons, 

Endurance{->B ,  e,  A;,  Mainloop)  >  OA 
Endurance{B ,  g,  j,Ma.\n\oop)  >  OA 
BtgEnough{B,g,j,  e,  Mainloop) 

Condition  II: 

Params.SampleRate  <  2 

Condition  IIIrTrue 

3.44:  NW>0  when  KF=0 

Condition  I: 

{3B,{3g,  Active{B,  g)A 

(Params.NumWTypes  >  0) 

(3i,  1  <  i  <  Params.NumWTypes, 

(Army[B,  5?].Weapon[j].NumWeapon  >  0)A 
(Army[5, ^].Weapon[i].UseLimit  >  0)A 
( Army [5, ^]. Weapon [i]. Range  >  0)A 

(3e,  1  <  e  <  NArmyf-'B], 

{3k,  1  <  k  <  Armyl^B, e]. Squadrons, 

{3j,  1  <  i  <  Army[B, 5]. Squadrons, 

Endurance{-'B,e,k,Ma.\n\oop)  >  OA 
Endurance{B ,  g,j,M&in\oop)  >  OA 

Observe{B ,g,j,  e,  k,  Mainloop)  A  InRange{B,  g,  i,  e,  k,  Mainloop) 

)  )  ) 

Condition  II:(Army[B,  ^].Weapon[i].FireRate  =  0)))) 

Condition  IIIrTrue 
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3.45:  Ax, Ay  set  in  destroyed  battalion 

Condition  I: 

(Duration  >  0)  A  (0  <  Mainloop  <  Duration) 

(35,(35^,  (Army[5, 51]. Squadrons  >  0)A 

(3j,  1  <j<  Army[5,  p]. Squadrons,  £'ndurance(B, S',  j,  Mainloop  —  1)  >  0)))A 
(Params.NumWTypes  >  0) 

(3i,  1  <  i  <  Params.NumWTypes, 

(Army[B,Sf].Weapon[i].Num Weapon  >  0)A 
(Army[B,S']-Weapon[t].FireRate  >  0)A 
(Army[B,5].Weapon[i].UseLimit  >  0)A 
(Army[B,^].Weapon[i]. Range  >  0)A 
(3e,  1  <  e  <  NArmy[-i5],  Achue(~'S,  e)A 
(3A:,  1  <  A:  <  Army[->B,  e]. Squadrons, 

(3j,  1  <  i  <  Army[5,^]. Squadrons, 

Endurance{-<B ,  e,  k,  Mainloop)  >  OA 
Endurance{B ,  g ,  j ,  Mainloop  —  1)  >  OA 

Obseri’e{B,g,j,  e,  k,  Mainloop  —  1)  A  lnRange{B,g,  i,  e,  k,  Mainloop) 

Condition  Il:->Active  (B,9) 

Condition  III: 

(Duration  >  Mainloop  +  1)  A  Casualty{-^B ^  e,  Ar,  Mainloop  +  1)A 

Endurance{-'B ,  e.  A',  Mainloop)  +  Damage{->B,  e,  A',  Mainloop)— 

^  ^  ^  Damage{->B,  e,  A,  Mainloop  —  1) 

Armyf-i^,  e].Endurance[A] 

A(y9m,l  <  m  <  NCmsgs[-i5],  il/zmp(-'5,  e,  m.  Duration)^ 

/\->Mimp(->B,  e,  m,  Mainloop)))) 
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Failure  Regions  in  Version  4 


4.1:  Uninitialized  field  in  pointer 

Condition  I: 

Active{B,  g)  A  Active{->B,  e)  A  Active{B,  f)  A  ArmyfB,  /]. Report  =  gA 
(3t,  0  <  t  <  Duration, 

t  =  Mainloop  —  RepT{B,g,f)  -  Army[B,  i?].ProcDelay- 

_ Amiy[B,g].RecRAte  _ * 

NumRec(B,p  jVlainloop— Army[B,p].ProcDelay) 

EObserve{B,  /,  e,  t)A 
(3/',0  <  t'  <  t,  EObserve(B,  g,  e,t'))) 

Condition  IlrTrue 
Condition  IILTrue 

4.2:  No  check  for  legal  range  of  subscripts  for  Terrain 

Condition  I:Duration  >  0  A  Active{B,g) 

Condition  II: 

(3j,l  <  Army[B,  5^]. Squadrons,  £'ndurance(B,  Mainloop)  >  OA 

(-^B.5,i(^lainloop)  <  0  V  A'’B,5j(Mainloop)  >  Params.XDelta  x  MaxTerrainV 
Pg  gj(Mainloop)  <  0  V  Ig,pj(Mainloop)  >  Params.YDelta  x  MaxTerrain)) 

Condition  IIIrTrue 

4.3:  Wrong  Battalion  WeapSensativity  used  in  Damage  calcula¬ 
tion 

Condition  1: 

Aciive{B,  g)  A  Active{-^B,  e)A 

(3ii:,  1  <  m  <  Params.NumWTypes,  A^umlPeapon(-iB,  e,  li;,  Mainloop)  >  OA 
(3t,  1  <  i  <  A’^umlPeapon(-iB,  e,  in,  Mainloop), 

(3j,  1  <  j  <  Army[R, 5]. Squadrons,  £^ndurance(jB,^,j,  Mainloop)  >  OA 
f  /(A'g,5j(Mainloop)  —  ax_,g,e.u.,.(Mainloop))^+ 

VV  ~  ay^B.e,u>,t(Mainloop))^ 

<  Army[-'R,  e]AVeapon[tn]. Radius) 

Condition  II;Army[R,5]AVeapSensativity[u;]  ^  Army[->B,  e]AVeapSensativity[i£j] 
Condition  III: 

(Army[->5,  e]AVeapon[u’]. Damage  >  0)A 

(,3m,  1  <m<  NCmsgs[R],A/imp(B, 5,  m.  Duration) 

A-'A/2mp(5,p,m,  Mainloop  —  1))))) 


45 


4.4:  Wrong  Battalion  VWEfFect  used  in  Observation  Jamming 

Condition  I: 

Active{B,  g)  A  Active{-<B,  e)  A  Params.SampleRate  >  2 A 
{3k,  I  <  k  <  Army[-'B,  e]. Squadrons,  £^n(iurance(-'B,  e,  A:,  Mainloop)  >  OA 
(3j,  1  <  j  <  Army[B, ^]. Squadrons,  £^ndurance(B, 5,  j,  Mainloop)  >  OA 
BigEnough{B,g,j,  e,  k,  Mainloop)  A  Clear{B,g,j,  e,  k,  Mainloop) 


Condition  II: 


Army[5,^] .VWEfFect  Armyl-iB,  ej.VWEffectA 
(3x',  j/',  x",  j/",  x'  —  A''B,j,j(Mainloop  —  1)  A  j/'  =  yB,3,j(Mainloop  —  1)A 
x"  =  A'-,B,e,;t(Mainloop  —  1)  A  y"  =  yi,B,e,fc(Mainloop  —  1)A 
(3n,  1  <  n  <  Params.SampleRate, 


nX(x'-r") 


IF  0  ^X  X  ^  ^  Params 

Condition  III: 


^^slmpleRate^  Mainloop)  >  0)) 


{Obvious{B,g,j,  e,  k,  Mainloop) A 

(^t,0  <t  <  Duration,  t  ^  Mainloop  A  J50i5erue(B,  5,  e,t)))V 
{^Obvious{B,g,j,  e,  k,  Mainloop)  A 

(Vt,  0  <t<  Duration,  t  ^  Mainloop  A  ->EObserve{B,  g,e,t))))) 


4.5:  No  Check  for  Destroyed  Squad  before  Initializing  Location 
Intensity 

and 


4.6:  No  Check  for  Destroyed  Squad  before  Observation 

Condition  l:Aciive{B,g)  f\  Aciive{->B,e) 

Condition  II: 

(3j,  1  <  j  <  Army[fi,  p]. Squadrons,  Endi/rance(B,^,j,  Mainloop)  <  OA 
(3A:,  1  <  k  <  Armyf-i^,  e]. Squadrons,  £'ndurance(-'B,  e,  A:,  Mainloop)  >  OA 
Observe{B,  g,j,  e,  k,  Mainloop))) 

Condition  III:True 
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4.7:  Wrong  Armyld  in  Check  for  Destroyed  Battalion  in  Obser¬ 
vation 

Condition  \:Active{B,g)  A  Active{->B ,  e) 

Condition  II: 

(3^,1  <k<  Army[-'5,  e]. Squadrons,  £Jn(itxrance(-'B,  e,  A:,  Mainloop)  >  OA 
(3j,  1  <  j  <  Army[5, 5]. Squadrons,  j  =  k  A  Endur ance{B, g,  j,Mam\oop)  <  0 

Condition  III: 

(3A:',  1  <  fc'  <  Army[-'B,  e]. Squadrons,  £'ndurance(-'B,  e,  fc,  Mainloop)  >  OA 
Observe{->B,e,k',g,j,Main\oop))  A  (V<,0  <t<  Dmat'ion, ->EObserve{->B,e,g,t)))) 


4.8:  Counting  loop  runs  off  end  of  Observation  List 

Condition  I: 

Active{B,  g)  A  Active{-‘B,  e)  A  EObserve{B,g,  e,  Mainloop  —  1)A 

(3ir;,  1  <w<  Params.NumWTypes,  A'^nmIV"eapon(B,  ^r,  If;,  Mainloop)  >  OA 

Army[5,5].WeapPriority[e,  u;]  >  0) 

Condition  II: 

|{^  <  k  <  Army[-'B,  e]. Squadrons  A  £lndnrance(-'B,  e,  Mainloop  —  1)  >  OA 

(3j,  1  <  j  <  Army[B, 5]. Squadrons,  £ndurance(5,5',j,  Mainloop)  >  OA 

Observe{B,  g,  j,  e,  k,  Mainloop  —  1))}|  =  1 

Condition  III:True 

4.9:  Wrong  initialization  of  Observation  List 

Condition  I: 

Active{B,  g)  A  Active{->B,  e)A 

(3j,  1  <j<  Army[B,  Squadrons,  £’ndurance(B,^,j,  Mainloop)  >  OA 
(3^,1  <  k  <  Army[->B,  e]. Squadrons,  £’ndurance(-'B,  e,  A:,  Mainloop)  >  OA 
Observe{B,g,j,  e,  Mainloop) 

Condition  II: 

{3k',  I  <  k'  <  Army[->5,  e]. Squadrons,  Endur ance{->B ,  e,  k' ,Ma\n\oop)  >  0  A  k  ^  k'A 
(3j',  1  <  j'  <  Army[B, 5^]. Squadrons,  £ndurance(5,^,j',  Mainloop)  >  OA 
Observe{B,g,j',  e,  k',  Mainloop))))) 

Condition  III:True 
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4.10;  Spurious  Check  for  Casualty  Squadrons  in  Observation 

Condition  I:Active{B,g)  A  Active{->B,  e) 

Condition  II: 

(3j,  1  <  j  <  Army[5,  ^]. Squadrons,  £^nc?urance(B,^,  jjMainloop)  >  OA 
Casualty{B,  g,  j,  Mainloop) A 

{3k,  I  <  k  <  Army[-'5,  e]. Squadrons,  Endurance{-‘B ,  e,  k,  Mainloop  >  OA 
Observe{B,  g,  j,  e,  k,  Mainloop) 

Condition  III: 

1  <  j'  <  Army[B,5].Squadrons,  JE^ndurance(5,^,j', Mainloop)  >  OA 
->Casualty{B,g,j',  Mainloop)  A  Observe{B,g,j' ,  Mainloop)))))  A 
{^t,  1  <  <  <  Duration,  i  ^  Mainloop  A  EObserve{B,  g,  e,t)) 


4.11:  Incomplete  Command  Message  Implementation 
Condition  I: 

Active{B,  g)A 

(3m,  1  <  m  <  NCmsgs[B],  Afzmp(5,^,  m,  Mainloop)  A  m,  Mainloop  —  1)) 

Condition  II: 

(3j,  1  <  i  <  Army[5,^]. Squadrons,  Endurance{B,g,j,M&\n\oop  —  1)  >  OA 
Casualty{B,g,j,  Mainloop  —  1)) 

Condition  III: 

{NuTnJam{B,g,^\&\n\oop  —  1)  =  0  A  Army[B,  ^j.CommJamEff  >  OA 
(3e,  Aciive{-'B ,  e), 

/(.^-•B,e(  Mainloop  —  1)  —  (Mainloop  —  1))^+ 

V  0^B,e(  Mainloop  —  1)  —  yB,p(Mainloop  —  1))^ 

<  Army[B,  ^I.CommJamRadius)  A  Army[5,  ^].CommJamPriority[e]  >  0)V 
{N umW eapon{B ,  g ,  1,  Mainloop  —  1) 

<  |{1'  3  3e,  J,  Observe{B,g,j,  e,  k,  Mainloop  —  1)}|  A 
Army[5,^].Weapon[l]. Damage  ^  Army[5,^].Weapon[2]. Damage) 
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4.12:  Misordered  Observation  functions 

Condition  l:Aciive{B ^  g)  A  Active{-<B^  e) 

Condition  II: 

{3k,  1  <  k  <  Army[->B,  e]. Squadrons,  Endurance{-'B,  e,  k,  Mainloop)  >  OA 
(A'-,B,e,t(Mainloop)  ^  A'^-,B,e,it(Mainloop  —  1)V 
I'-fl.e.fcCMainloop)  ^  y^^B,e,fc(Mainloop  -  1)) 

Condition  III: 

(3j,  1  <j<  Army[5,  p]. Squadrons,  £^n(iurance(B,  5',  j,  Mainloop)  >  OA 
->Observe{B,  g,  j,  e,  k,'Ma.m\oop  —  1)  A  Obs€rve{B ,  g ,  j ,  e,  k,  Mainloop))) 


4.13:  Spurous  check  in  Message  Processing 
Condition  I: 

Aciive{B,g)  A  Active{-^B,e)  A  Active{B,  f)  A  Armj’f^, /]. Report  =  gA 
(3d,  d  =  RepT(B,  g,  f)  +  ■ 

{3t,t  +  d  <  Mainloop  <  t  +  d  +  Army[B,p].ProcDelay,  £^(96serue(B, /,  e,  t) 
Condition  II: 

(3/',  Active{B,  /'),  Army[5,  /']. Report  =  gA 

{3t',t'  =  Mainloop  —  (d  +  Army[B, /'j.SendRate  —  Army[5, /].SendRate), 
(3e',  Active(-'B,  e')  A  e  ^  e',  EObserve{B ,  /',  e',  t') 

Condition  III: 

{^t",\  <  t"  <  T)mai\on,  EObserve{B,g,e',t")\/ 

{t"  A  (3/",  Aciive{B,  f")  A  Army[B,  /"].Report  =  g, 

EObserve{B,f",e',t"))))))))) 
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4.14:  Wrong  index  in  Message  Processing 

Condition  I: 

AcUve[B ,  g)  A  Active{->B^  e)  A  Active{B,  f)  A  Army[5,  /]. Report  =  gA 
{3d,d  —  RepT{B,g,  f)  +  /;umRei(/,5,Mainloop) ' 

{3t,  t  A  d  <  Mainloop  <  t  +  d  +  Army[5,  pj.ProcDelay,  EObserve{B,  f,e,t) 
Condition  II: 

(3 /',  Active{B,  /'),  Army[B,  /']. Report  =  gA 
Army[B, /']. Priority  <  Army[B,  /].PriorityA 
(3e',  Active{->B ,  e')  A  e  ^  e\  EObserve(B ,  f,  e\  i) 

Condition  III: 

1  <  <  'Duration,  EObserve{B , g,  e' ,  t')V 

{t'  <  t  A  (3 /",  Active{B,  f")  A  Army[B,  /"]. Report  =  g, 

EObscrve{B,r,e\t')))))))) 

4.15:  No  Check  for  Engaged  before  Observed  from  Reports 

Condition  I: 

Active{B,  g)  A  Aciive{B,  f)  A  Active{~<B,  e)  A  Army[B,  /]. Report  =  gA 
(3t,0  <  t  <  Duration, 

t  =  Duration  —  RepT{B,g,  f)  —  Army[5,  jfJ.ProcDelay— 

_ Army [.B^gj.Rec Rate _  * 

NnmRec(R, Duration— Army  [R,^].ProcDelay) 

EObserve{B ,  f,  e,t  —  1)) 

Condition  II: 

(3t',  0  <  t'  <  Duration,  EObserve{B,  g,  e,t  —  1)A 

(3it>,  1  <  tu  <  Params.NumWTypes,  A^uml'Peapon(B,5',  u),  t)  >  OA 

Army[B,5'].WeapPriority[e,  u’]  >  0  A  InRange{B,g,e,w,t))) 

Condition  III:True 
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4.16:  Spurious  Check  for  ObsJamEff=0 

Condition  I: 

Active{B,  g)  A  Active{-<B,  e)A 

(3^,1  <j<  Army[B,  ^]. Squadrons,  £^n<iurance(B,^,j,  Mainloop)  >  OA 
(3A:,  1  <  k  <  Arniyf-iB,  e]. Squadrons,  £^ndwrauce(->B,  e,  A:,  Mainloop)  >  OA 
BigEnough{B,g,j,  e,  k,  Mainloop)  A  Clear{B,g,j,  e,  k,  Mainloop) 

Condition  II: 

(3e',  1  <  e'  <  NArmy[-'B],  Army[-'B,  e']. Squadrons  >  OA 
Army[-'5,  e'j.ObsJamEff  =  0) 

Condition  III: 

-^Obvious{B,g,j,  e,  k,  Mainloop)  A 

(^<,1  <t  <  Duration,  5'ome065en;e(B,  5,  e, /:,<)))) 

4.18:  Reversed  Parameters  in  Observation 

Condition  \:Active{B,  g)  A  Aciive{-<B,  e)  A  EObserve{B,  g,  e,  Mainloop) 

Condition  II:^  ^  e  A -'£06seri)e(S,  e,^,  Mainloop) 

Condition  III:e  >  NArmy[5]  V  Duration  >  Mainloop  +  1 

4.19:  Abort  in  SetCoordinates  when  Battalion  leaves  Terrain 

and 


4.20:  Abort  in  Slopeintensity  when  Battalion  leaves  Terrain 

Condition  l:Active{B,g) 

Condition  II: 

(^B,3(Ma-inloop)  <  0  V  (Mainloop)  >  Params.XDelta  x  MaxTerrain)A 
(I B ,5 (Mainloop)  <  0  V  (Mainloop)  >  Params.YDelta  x  MaxTerrain) 

Condition  III:True 
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4.21:  NumFixers  Exceeds  Maximum  Value 

Condition  l:Active{B^g) 

Condition  II: 


/ 

1  if  -i(7ostxo//t/(5, 5,  j,  Mainloop  —  2)A\ 

Army  [B  ,5]  .Squadrons 

Enduranc€{B,  g,  j,  Mainloop  —  1)  <  0 

i=i 

.0  otherwise  / 

>  s{B,g,  Mainloop)  —  Mainloop  —  1) 


Condition  III: 


(3i,  1  <j<  Army[5, 5]. Squadrons,  (7031X0/^1/(5,  Mainloop) A 

/q  _  _ Amiy[B,g].FixRateX VttTnFtx(B,g,i,Mainloop— 1) 

v^r,  r 


1  if  Cosuo//t/(5,^,j',  Mainloop)\  ’ 


0  otherwise 


f  Anny[B, 5). Squadrons 

E 

i'=i 

r  >  5txpp/(5, Mainloop)A 

r  >  (Army[5, 5]. Endurance  —  5nc/ixronce(5, 5,  j,Mainloop))) 


4.22:  Observation  when  Params.SampleRete  <  2 

Condition  I: 

(35,  3o,  Active(B,g)A 
(3e,  1  <  e  <  NArmyh5], 

{3k,  I  <  k  <  Army[-i5,  e]. Squadrons, 

{3j,  1  <j  <  Army[5, 5]. Squadrons, 

5uc/i/rance(-i5,  e,  A',  Mainloop)  >  OA 
Endurance{B,  g,j,  Ma,m\oop)  >  OA 
Bi gEnough{B ,  g ,  j ,  e,  k,  Mainloop) 

Condition  II: 

Params.SampleRate  <  2 

Condition  III:True 


52 


4.24:  Wrong  parameter  declaration  in  Command  Message  Pro¬ 
cessing 
Condition  I: 

Active{B,  g) 

(3m,  1  <m<  NCmsgs[J9],  Mtmp( J5, m,  Mainloop)  A  m,  Mainloop  —  1) 

Condition  II: 

(3n,  1  <  n  <  NCmsgs[J5]  Am  ^  n, 

Mimp{B,g,n,M&m\oop)  A  ->Mimp{B,  g,n,  Mainloop  —  1))) 

Condition  IILTrue 

4.26:  Priority  Queue  not  Preserved  in  Message  Processing 

Condition  I: 

Active{B,  g) 

(3m,  1  <  m  <  NCmsgs[J5],  iV/imp(J5,^,  m,  Mainloop)  A  -'7l/imp(J5,  m,  Mainloop  —  1)A 
(3n,  1  <  n  <  NCmsgs[J5]  A  m  7^  n, 

A/ imp{B,g,  n,  Mainloop)  A  ->Mimp{B,  g,  n,  Mainloop  —  1) 

Condition  II: 

(Cmsgs[J9,  m]. Priority  >  Cmsgs[j9,  n].Priority)A 
(Cmsgs[J5,  m].msg  7^  Cmsgs[J5,  n].msg))) 

Condition  III:True 
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Failure  Regions  in  Version  5 


5.1:  Bad  list  manipulation 

Condition  I: 

Active^B,  g)  A  Active{-^B,  e)A 

1  ^  k  <  Army[5, ^]. Squadrons, £nc?urance(B,5',j, Mainloop)  >  OA 
3k,  I  <  k  <  Army[->B,  e]. Squadrons,  £ndurance(-'B,  e,  fc,  Mainloop)  >  OA 
BigEnough{B,  g,j,  e,  k,  Mainloop)  A  ->Clear{B,g,j,  e,  k,  Mainloop) 

Condition  II: 

3k', 1  <  k'  <  k,Endurance{-<B,e,k',  Mainloop)  >  0  A  Observe{B,g,j,  e,k',  Mainloop) 
Condition  III:True 


5.2:  ^  instead  of  >  in  check  for  busy  processors 

Condition  I: 

Active{B,g)  A  NCmsgs[B]  >  0 
3,m,  1  <  m  <  NCmsgs[B], 

RecT{B ,  g,  m)  +  RecDelay{B,  g,  RecT{B,  g,m))  +  QueDelay{B,g,  m)  =  MainloopA 
A'umProcess(B , g,  Mainloop)  >  0 


Condition  II: 


NCmsgs[B] 

i: 

n=l 


0  if  (n  =  m)  V  Cmsgs[B,  nj.Dest  ^  gV 

RecT{B,g,n)  +  RecDelay{B,  g,  RecT{B,g,  n))+ 
<  QueDelay{B,  g,n)  >  Mainloop 


V 

+ 


NAnnv[B] 

i: 

/=i 


1  otherwise 

'0  if  Army [B, /]. Report  ^  gV  ^ 

(Vt,  1  <t<  Mainloop  —  RepT{B,g,  f) 

^  -RecDelay{B,g,RepT{B,g,f)), 

-'SomeObserve{B,  f,  t)) 


\  (,1  otherwise 

>  A'u7nProcess(B,5,  Mainloop) 


/ 


Condition  III:il/7mp(B,  y,  m.  Duration)  A  Cmsgs[5,  mj.msg  Army[B,  p] 
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5.3:  Squadrons  with  initial  endurance  <  0  not  destroyed 
Condition  I:True 
Condition  II: 

3B,B  €  {false,  true),  NArmy[5]  >  OA 

3p,l  <  <  NArmy[5],  Army[B, S']. Squadrons  >  0 

3j,  I  <  j  <  Army[B,^]. Squadrons, 

Army[B,  </].Endurance[_7]  <  0 

Condition  III:Duration  =  0 


5.4:  Squadrons  with  command  endurance  <  0  not  destroyed 

Condition  I: 

Aciive{B,g)  A  NCmsgs[B]  >  OA 

3m,  1  <  m  <  NCmsgs[B],  m,  Mainloop) 

Condition  II: 

1  <  J  <  Cmsgs[B,  m].msg. Squadrons, 

Cmsgs[B,  m].msg.Endurance[j]  <  0 

Condition  III:Duration  =  Mainloop 

5.5:  Position  and  PreArmy  values  set  before  Army  values  final 
ized 

Condition  I: 

Activ€{B,g)  A  NCmsgs[B]  >  OA 
(3m,  1  <  m  <  NCmsgs[B], 

Mimp{B,  g,  m,  Mainloop)  A  -<Mimp{B,g,  m,  Mainloop  —  1)) 

Condition  II:True 

Condition  III:Duration  =  Mainloop 
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5.6:  Improperly  rejected  Duration  =  0 

and 

5.14:  Positions  not  initialized  if  Duration  =  0 
Condition  I:True 
Condition  II:Duration  =  0 
Condition  III:True 


5.7:  Improperly  rejected  NArmy  =  0 

Condition  I:True 

Condition  €  {false, true}, NArmy[B]  =  0 

Condition  IIItTrue 


5.8:  Dequeues  messages  for  existing,  not  available,  processors 

Condition  I: 


Active{B,  g)  A  NCmsgs[5]  >  0  A  NumProcess{B,  g,  Mainloop)  >  OA 
3t,t  =  Mainloop  —  Army[B,5r].ProcDelay  —  RepT{B, g,  f) 
—RecDelay{B,g,RepT{B,g,f)),l  <t  <  DurationA 


371,  n  = 


NCmsgs[B] 

E 

Tn=l 


1  if  Cmsgs[B,  77i].Dest  =  gA  \ 

RecT{B,g,m)  +  RecDelay{B,g,RecT{B,g,m))  <  MainloopA 
->M imp{B,  g,  m,  Mainloop) 


+ 


NArmv[B] 

E 

/=i 


0  otherwise 

^  Mainloop— /JepT(B,s,/) 

E 

V 


0  otherwise 


1  if  SomeObserve{B,  \ 

0  otherwise 

if  Army [5, 5']. Report  =  g 


Condition  II:n  >  NumProcess{B , g,M&in\oop) 
Condition  III:True 


5.9:  Improperly  rejected  Weather  Start  >  Duration 

Condition  I;True 

Condition  II:3ii7, 1  <  ui  <  Params.NumWEvents,  Weather[u7].TStart  >  Duration 
Condition  III:True 
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5.10;  Improperly  rejected  Weather  End  >  Duration 

Condition  I:True 

Condition  1  <  <  Params.NumWEvents,  Weather[ii»].TEnd  >  Duration 

Condition  III:True 

5.11:  Improperly  rejected  CommJamRadius  =  0 
Condition  I:True 
Condition  II: 

3B,B  €  {false,  true},  NArmy[B]  >  OA 

35-,  1  <  g  <  NArmy[5],  Army[B, 5^]. CommJamRadius  =  0 

Condition  III:True 

5.12:  Improperly  rejected  ObsJamRadius  =  0 
Condition  I:True 
Condition  II: 

3B,B  €  {false,  true),  NArmy[5]  >  OA 

35, 1  <  S'  <  NArmy[B],  Army[5,5']. ObsJamRadius  =  0 

Condition  III:True 

5.13:  Segmentation  violation  when  battalion  leaves  terrain  grid 

and 

5.41:  Altitude  and  IntnstyLoc  poorly  defined  when  Battalion 
leaves  Terrain  grid 

and 


5.42:  Use  of  borders  to  initialize  maximum  and  minimum  for 
W,H  calc  causes  problems  when  squadrons  leave  Terrain-defined 
area 

Condition  I:(Duration  >  0) 

Condition  II: 

3B,  g,Activ€{B^  g)A 

(A^BipCMainloop)  >  Params.XDelta  x  MaxTerrainV 
yB_p(Mainloop)  >  Params.YDelta  x  MaxTerrainV 
A^B,s(Mainloop)  <  0  V  yB,5(Mainloop)  <  0) 

Condition  III:True 
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5.15:  No  check  to  see  if  NW  =  0  before  setting  Action  to  Engaged 
Condition  I: 

Active(B,g)  A  Active{->B,  e)  A  Mainloop  >  1  A  Params.NumWTypes  >  OA 
1  <  i  <  Army[5, 5]. Squadrons,  £'ndurance(5,y,j,  Mainloop)  >  OA 
3/:,!  <  k  <  Arinyf-i^,  e]. Squadrons,  £'n<iurance(-'B,  e,  1,  Mainloop)  >  OA 
Observe{B,g,j,  e,  1,  Mainloop  —  1)A 
3w,  1  <  in  <  Params.NumWTypes, 

Army[5,5f].Weapon[in]. Range  > 

/(A^b.5  (Mainloop)  —  A^-,B,e,Jk(Mainloop  —  1))^+ 
y  (pB.flCMainloop)  -  K.B,e,Jk(Mainloop  -  1))^ 

Condition  II: 

Army[J5,p].Weapon[in].FireRate  <  OV 
Army[B,5].WeapPriority[e,  in]  <  OV 
Army[5,^].Weapon[in].UseLimit  <  OV 
A^umlPeapon(J5,  u',  Mainloop)  <  OV 
Army[5, ^].Weapon[in].UseLimit  < 


^Mainloop  N um^V eapon(B ,g ,w ,t) 

E  E 


t=2 


t=l 


'1  if  axB,g,w,i{^)  7^  co\ 


0  otherwise 


Condition  III: 


Vi,  1  <t<  Duration,  Vin',  1  <w<  Params.NumWTypes, 

Num\Vtapon(B.g,w' -t)  >  0  AVi,l  <  i  <  NumWeaponiB.q.w'.t), 

VI-',!  <  k'  <  Army[-.J5,e].Squadrons, 

{ax B,g,w',i{^')  ^  A-,B,e,/:'(i)  V  Ql/B,fl,ty',t (i)  ^  P^B,e,fc'(i)) A 

jBm,l  <m<  NCmsgs[5],  A/imp(B, S',  m.  Duration)  A  m,  Mainloop  —  1) 
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5.16:  Improper  treatment  of  case  where  KF  =  0 

Condition  I: 

Active{B,  g)  A  Active{-‘B^e)  A  Mainloop  >  1  A  Params.NumWTypes  >  OA 
3i,  1  <  Army[B, 5]. Squadrons,  Fndurance(B,^,j, Mainloop)  >  OA 

1  <  <  Army[->5,  e]. Squadrons,  JEJndurance(->J5,  e,  Mainloop)  >  OA 

Observe(B,g,j,  e,  fc,  Mainloop  —  1)A 
3u),  1  <  ry  <  Params.NumWTypes, 

Army[B,p].Weapon[u>]. Range  > 

(Mainloop)  -  A"-,fl,e,fc(Mainloop  -  1))^+ 

V(Vb, a  (Mainloop)  -  F-,b, e,fc(Mainloop  -  1))^ 

Condition  II:Army[B,  ^].Weapon[u;].FireRate  <  0 
Condition  III: 

Army[B,^].WeapPriority[e,  >  OA 
Army[5,^].Weapon[u;].UseLimit  > 


^  Mainloop  A'umH'eapon(S,a,n;,t) 

E  E 

t=2  »=1 


'1  if  axB,g,wA^)  7^  «d\ 


/ 


A 


0  otherwise 

NumWeapon{B^  g,w,Maim\oop)  >  0  A  Vt,  1  <  t  <  Duration, 

Vii;',  1  <w'<  Params.NumWTypes,  A^umlFeapon(5,^,  tt;',  <)  >  OA 
Vz,  1  <i<  Num\Veapon(B,g,w',t), 

VA’',  1  <  A'  <  Armyf-iB,  e]. Squadrons, 

iaXB,g,w'At)  A^-B,e,v(0  V  ayB,g,w>Ai)  ¥■  F-,B,e,fc'(0)A 

1  <m<  NCmsgs[B],  5,  m.  Duration)  A m,  Mainloop  —  1) 
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5.17:  Improper  Observation  when  H  =  Z 

Condition  l\Active{B^g)  A  Active(->B,  e) 

Condition  II: 


3j,  1  <  j  <  Army[B, p]. Squadrons,  £'n(iurance(5,p,  j,  Mainloop)  >  OA 
3k A  <  k  <  Army[->B,e].Squadrons,  £'ndurance(->B,e,  A:,  Mainloop)  >  OA 
Big Enough{B ,  g ,  j ■>  k,  Mainloop)  A  Ohvious{B ^  g  A ■,  e,  k,  Mainloop)A 
->Clear{B,g,ji  c,  fc,  Mainloop)A 

xgj  =  XB,5j(Mainloop  -  1)  A  ygj  =  j/B,g,j(Mainloop  -  1)A 
xek  =  x-,B,e,t(Mainloop  —  1)  A  yek  =  j/-,B,e,jt(Mainloop  —  1)A 


(Va,a',c,c',z,2',a  =  [ 
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Params .  X  Del  t  a 


jAa'=[ 


xek 


Params .  X  Del  t  a 


A 


=[ 


Params.  YDelta 


JAC'=1 


yek 


Params.  YDelta 


A 


z  =  Alt{a,  c,  xgj,  ygj)  A  z'  =  Alt{a',  c',  xek,  yek) A 
{'in,  1  <  n  <  Params. SampleRate  —  1, 


{3r,p,q,r 


_ n _  _  I  xgj+TX(xek-xgj)  I  I  ygj+TX{yek-ygj)  I 

Params.SampleRate’  ^  [  Params.XDelta  J  ’  ^  [  Params.YDelta  J  ’ 


{z  +  r  x{z'  -  z))  >  Alt{p,  q,  xgj  +  r  x  {xek  -  xgj),  ygj  +  r  x  {yek  -  ygj))))) 
Condition  III:V<,1  <t  <  D\iTait\on,->EObserve{B,g,e,i) 


5.18;  Does  not  reject  Army.NumFixers  >  Army. Squadrons 

Condition  I:(Duration  >  0) 

Condition  II: 

{3B,B  €  {l...NArmy[true]}, 

Army[true,  Bj.NumFixers  >  Army[true,  5].Squadrons)V 
€  '{l...NArmy[false]}, 

Army[false,  5].NumFixers  >  Army[false,  .B], Squadrons) 

Condition  III:True 


60 


5.19:  Does  not  reject  Cmsgs.msg.NumFixers  > 

Cmsgs.msg. Squadrons 

Condition  I: 

3B,  B  €  {true, false), 

(3/,l  <  /  <  NArmy[B], 

(3m,  m  €  {l...NCmsgs[B]},  A/fmp(S, /,  m,Duration))) 

Condition  II: 

Cmsgs[B,m].msg.NumFixers  >  Cmsgs[J9,  mj.msg. Squadrons 
Condition  III:True 

5.20:  Does  not  reject  Army.Num Jammers  >  Army. Squadrons 

Condition  I:(Duration  >  0) 

Condition  II: 

(35,5  6  {l...NArmy[true]}, 

Army[true,  5]. Num Jammers  >  Army[true,  5]. Squadrons) V 
(35,5  6  {l...NArmy[false]}, 

Army[false,  5].NumJammers  >  Army[false,  5]. Squadrons) 

Condition  III:True 

5.21:  Does  not  reject  Cmsgs.msg. NumJammers  > 

Cmsgs.msg. Squadrons 

Condition  I: 

35,  5  €  {true, false), 

(3/,l  <  /  <  NArmy[5], 

(3m,  m  €  {l...NCmsgs[5]),  A/fmp(5, /,  m.  Duration))) 

Condition  II: 

Cmsgs[5,  mj.msg. NumJammers  >  Cmsgs[5,  mj.msg. Squadrons 
Condition  III:True 
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5.22:  Does  not  reject  Army.NumProcess  >  Army. Squadrons 

Condition  I:  (Duration  >  0) 

Condition  II: 

(35,5  €  {l...NArmy[true]}, 

Army[true,  5].NumProcess  >  Army  [true,  5].  Squadrons)  V 
(35,5  G  {l...NArmy[false]}, 

Army[false,  5].NumProcess  >  Army[false,  5], Squadrons) 

Condition  IIIrTrue 

5.23:  Does  not  reject  Cmsgs.msg.NumProcess  > 

Cmsgs.msg. Squadrons 

Condition  I: 

35,  5  G  {true,  false}, 

(3/,l  <  /  <  NArmy[5], 

(3m,  m  G  {l...NCmsgs[5]},  iV/imp(5, /,  m.  Duration))) 

Condition  II: 

Cmsgs[5,  mJ.msg.NumProcess  >  Cmsgs[5,  m].msg. Squadrons 
Condition  III:True 

5.24:  Does  not  reject  Army.NumReceive  >  Army. Squadrons 

Condition  I:(Duration  >  0) 

Condition  II: 

(35,5  G  {l...NArmy[true]}, 

Armyftrue,  5].NumReceive  >  Army[true,  5]. Squadrons) V 
(35,5  G  {l...NArmy[false]}, 

Army[false,  5].NumReceive  >  Army[false,  5]. Squadrons) 

Condition  III:True 
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5.25:  Does  not  reject  Cmsgs.msg.NumReceive  > 
Cmsgs.msg. Squadrons 
Condition  I: 

3B,  B  £  {true, false}, 

(3/,l  <  /  <  NArmy[5], 

(3m, m  G  {l...NCmsgs[5]},A/fmp(B,/, m,Duration))) 

Condition  II: 

Cmsgs[5,  mJ.msg.NumReceive  >  Cmsgs[B,  mj.msg. Squadrons 
Condition  IIIiTrue 

5.26:  Does  not  reject  Army. Num Send  >  Army.Squadrons 

Condition  I:(Duration  >  0) 

Condition  II: 

{3B,B  G  {l...NArmy[true]}, 

Armyftrue,  5].NumSend  >  Army[true,  5].Squadrons)V 
{3B,B  G  {l...NArmy[false]}, 

Army[false,  Bj.NumSend  >  Army[false,  B]. Squadrons) 

Condition  III:True 

5.27:  Does  not  reject  Cmsgs.msg. NumSend  > 

Cmsgs.msg. Squadrons 

Condition  I: 

35,  B  G  {true, false), 

(3/,l  <  /  <  NArmy[5], 

(3m,  m  G  {l...NCmsgs[5]),  i\/fmp(5, /,  m.  Duration))) 

Condition  II: 

Cmsgs[5,  m].msg. NumSend  >  Cmsgs[5,  mj.msg. Squadrons 
Condition  III:True 
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5.28:  Improperly  rejected  SampleRate  =  1 

Condition  I:True 

Condition  II: Params. SampleRate  =  1 
Condition  III:True 

5.30:  Improperly  rejected  Army. Weapon. Range  =  0 

Condition  I: 

3B^B  6  {false,  true),  NArmy[B]  >  OA 

3^,  1  <  5  <  NArmy[B],  Params. NumWTypes  >  0 

Condition  II:3ii7, 1  <w<  Params. NumWTypes,  Army[B, 5]. Weaponfty]. Range  =  0 
Condition  III:True 

5.31:  KA  initialized  to  0  not  NK 

Condition  l:Active{B,g)  A  Params. NumWTypes  >  0 
Condition  II: 

3w,  1  <  le  <  Params. NumWTypes,  Army[B,^].Weapon[ie].NumWeapon  >  0 
Condition  III: 

Active{-'B,  e)  A  Params. SampleRate  >  1 A 

3i,  1  <  Army[B,  5]. Squadrons,  £'ndurance(B,p,J,  Mainloop)  >  OA 

31’,  1  <  k  <  Armyf-iS,  e]. Squadrons,  £'ndurance(-'B,  e,  1,  Mainloop)  >  OA 
Observe{B,g,j,  e,  1,  Mainloop  —  1)  A  InRange{B^  g,  w,  e,  1,  Mainloop  —  1)A 
N umW eapon {B,  g,w,M alnloop)  >  0  A  Army[B,^].WeapPriority[e,  ly]  >  OA 
Army[B,y].Weapon[u;].UseLimit  >  0 


64 


5.32:  Weather  movement  components  improperly  rejected  if 
negative 

Condition  I:Params.NumWEvents  >  0 
Condition  II: 

3u»,l  <  IV  <  Params.NumWEvents, 

Weather [i/;].dWX  <  0  V  Weather [lyj.dWY  <  0 

Condition  III:True 

5.33:  Command  implemented  in  destroyed  battalion 

Condition  I: 

1  <  Mainloop  <  Duration  A  3B,  B  6  {true, false}, 

NArmy[5]  >  0  A  NCmsgs[5]  >  OA 

3m,  1  <  m  <  NCmsgs[5],l  <  Cmsgs[5,  mj.Dest  <  NArmy[B]A 
3g^g  =  Cmsgs[B,  m]. Best,  Army[B,  5]. Squadrons  >  OA 

(3j,  1  <j<  Army[jB, 5]. Squadrons,  En(iurance(B,^,j,  Cmsgs[B,  m]. Time)  >  0)A 
i\/imp(jB,  5,  m,  Mainloop)  A  ->M imp{B,  g,m,  M&inloop  —  1) 

Condition  II: 

(^y,  1  <  j  <  Army[B,^]. Squadrons,  £'ndurance(B,  5,},  Mainloop)  >  0)A 
(Cmsgs[B,  mj.msg. Squadrons  ^  Army[5,  ^j.SquadronsV 

(3j,  1  <  j  <  Cmsgs[B,  mj.msg. Squadrons,  Cmsgs[i9,  mj.msg. Endurance}}]  >  0)V 
Cmsgs[B,  mj.msg.X  7^  A'^b, a  (Mainloop)  V  Cmsgs[5,  mj.msg.Y  ^  I  b,j  (Mainloop)) 

Condition  III:True 

5.34:  V  calculated  using  possible  destroyed  squadrons  with  com¬ 
mand 
Condition  I: 

Active{B,g)  A  NCmsgs[B]  >  OA 

3m,  1  <  m  <  NCmsgs[B],  5,  m,  Mainloop)  A -’Mimp(B,  5',  m,  Mainloop  —  l)A 

Cmsgs[jB,  mj.msg. Squadrons  >  0 

Condition  II: 

1  <  i  <  Cmsgs[B,  mj.msg. Squadrons,  Cmsgs[5,  mj.msg. Endurance}}]  <  OA 
{^j\l  <  j'  <  Cmsgs[jB,  m].msg. Squadrons,  Cmsgs[B,  m].msg. Endurance}}']  >  OA 
Cmsgs}5, m].msg.V0}}']  >  Cmsgs}5, m].msg.V0}}])A 
Cmsgs}B,  mj.msg.VO}}]  >  0 

Condition  III: 

/3m',  1  <  m'  <  NCmsgs}jB], 

Mimp{B,g,  m,  Duration)  A  -‘Mimp{B,g,  m,  Mainloop  —  1) 
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5.35:  NumFixers  can  be  greater  than  original  value 
Condition  I: 

Active{B,  g)  A  NumFix{B,  g,  Mainloop  —  1)  >  OA 

(3ji,  1  <  j  <  Army[5,  ^]. Squadrons,  Fn<furance(5,^,j,  Mainloop)  >  OA 

Casualty{B,g,j,  Mainloop  —  1)  A  ->Casualty{B,  g,j,  Mainloop)) 

Condition  II: 

(NumFix{B,  g,  Mainloop  —  1)+ 

Mainloop  -  1)  -  A'un,Cas(B,j, Mainloop)  x 
>  s{B,  g,  Mainloop  —  1) 

Condition  III: 

/3m,  1  <  m  <  NCmsgs[B], 

Aftmp(5,p,m,  Duration)  A -<Mimp{B,g,m,Ma.\n\oop  —  1)A 
Duration  >  Mainloop  -f  1  A  NumCas{B,g,  Mainloop)  >  0 

5.37:  gold  observes  when  version  does  not 


5.43:  Version  fails  to  engage 

Condition  I: 

Active{B,  g)  A  Active{->B,  e)  A  Active{B,  f)A 

Army[5, /j.Report  =  g  A  Mainloop  >  Arm5’^[5, /j.ObsXpireA 

NumSend{B ,  g,  Mainloop  —  Army[5, /].ObsXpire)  >  0 

Condition  II: 

EObserve{B,  /,  e,  Mainloop  —  Army[5,  /].ObsXpire)A 
Army[5, /J.ObsXpire  =  RepT{B,  f,g)  +  Army[B,5].ProcDelay+ 
RecDelay{B,  g,  Mainloop  —  Army[B,  /j.ObsXpire  -f  RepT{B,  /,  g)) 

Condition  III: 

(/3/',  Active{B,  f)  A  Army[5,  /']. Report  =  g, 

3t,  1  <  t  <  Duration,  £^Ofeserue(B, e,  t))A 
(/3<,  1  <t<  Duration,  EObserve{B,g,e,t)) 
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5.39:  Current,  not  previous,  observations  sent  in  report  mes¬ 
sages 
Condition  I: 

Active{B,g)  A  Active{B,  f)  A  Active{->B ,e)  A  ArmyfB,  /]. Report  =  gA 
(3j,  1  Army[B, /]. Squadrons,  jEn<iurance(5, /,j,  Mainloop)  >  OA 

(3/:,  1  <  k  <  Armyl-iB,  e]. Squadrons,  jEJndurance(->5,  e, Mainloop)  >  OA 
Observe{B ,  f,j,  e,  k,  Mainloop)  A  Army[B,  /].NumSend  >  0 

Condition  ll:-<Observe{B,  f,j,e,  k,  Mainloop  —  1)) 

Condition  III: 

(V<,0  <t<  Duration, -I £^06seri;e(R,g,  e,  t)) 

5.40:  Messages  implemented  out  of  order 

Condition  I: 

Active{B,  g)  A  NCmsgs[B]  >  0 

3m,  1  <  m  <  NCmsgs[R],  Cmsgs[fi,  mj.Dest  =  gAl 

RecT{B,g,m)  =  Mainloop 

Condition  II: 

(3n,  1  <  n  <  NCmsgs[5],  m  ^  n  A  Cmsgs[B,  nJ-Dest  =  gA 
RecT{B,g,n)  <  Mainloop  A -'i\/2mp(R, 5,  n,  Mainloop) A 
Cmsgs[R,  n]. Priority  =  Cmsgs[R,  m].Priority)V 

(3/,  Act2ue(B, /),  Armj'[B, /]. Report  =  g  A  Army[B, /]. Priority  =  Cmsgs[R,  m].PriorityA 
3t,  Mainloop  —  RepT{B,  /,  g)  —  RecDelay{B,  g,  Mainloop  —  Army[S,  ^].ProcDelay) 

— Army[5,  ^j.ProcDelay 

<  t  <  Mainloop  —  RepT{B,  f,  g)  —  RecDelay{B,  g,  Mainloop  —  Army[R,^].ProcDelay), 
SomeObserve{B,  /,  <)) 

Condition  IIIiTrue 
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Failure  Regions  in  Version  6 


6.1:  Reversed  Parameters  in  UpdatLOSList 

Condition  I: 

Active{B,  g)  A  Active(-<B,  e)A 

1  <  Army[B,  5']. Squadrons,  £^n<iurance(B, 5,7,  Mainloop)  >  OA 

3fc,  1  <  k  <  Army[-'B,  e]. Squadrons,  £ndurance(-'5,e,  fc,Mainloop)  >  OA 
BigEnough{B,  g,j,  e,  k,  Mainloop)  A  Params.SampleRate  >  2 

Condition  II: 

A^B,ff,i(Mainloop  -  1)  A^-,B,e,jfe (Mainloop  -  1)V 
,i(Mainloop  —  1)7^  (Mainloop  —  1) 

Condition  III: 

{~<Clear(B,  g,j,  e,  k,  Mainloop))  A  Obvious{B^g^j^  e,  I',  Mainloop)  A 
(;9i,0  <i  <  Dui&tlon,  EObserve(B,g,e,t)) 


6.2:  No  check  on  send  time  for  commands  of  equal  priority 

Condition  I: 

Active{B,  g)  A  NCmsgs[B]  >  0  A  A^umProcess(B,  5,  Mainloop)  >  OA 
3m,  1  <m<  NCmsgs[B],i\/imp(B,5,m,Mainloop)A 
-'Mimp{B,g,  m,  Mainloop  —  1)A 

3n,l  <  n  <  NCmsgs[B],m  ^  n  A  Mimp{B,g,n,M&in\oop)A 
-'7\/imp(5, 5,  n,  Mainloop  —  1) 

Condition  II: 

m  <  n  A  Cmsgs[B,  m].Time  >  Cmsgs[B,  n].TimeA 
Cmsgs[5,  m]. Priority  =  Cmsgs[5,  n]. Priority 

Condition  III:Cmsgs[B,  m].msg  7^  Cmsgs[B,  n].msg 
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6.3:  Improper  calculation  of  LOS  list  point  separation 

Condition  I: 

Active{B,  g)  A  Active{->B,  e)  A 

3j,  1  <j<  Army[B,  5]. Squadrons,  £^ndurance(5,  S',  Mainloop)  >  OA 
3k, 1  <  k  <  Army[-'5,  e]. Squadrons,  En(iurance(-iB,  e,  fc,  Mainloop)  >  OA 
BigEnough(B,  g,j,  e,  k,  Mainloop)  A  Params.SampleRate  >  2 


Condition  II: 


3i,i  G  {True,  False}, 

xgj  =  XB,p,i(Mainloop  —  1)  A  ygj  =  ys,p,j(Mainloop  -  1)A 
xek  =  x-.s,e,jt(Mainloop  -  1)  A  yek  =  y^B,e,fc(Mainloop  —  1)A 

i  =  (Vu,  a',  C,  c',  Z,  z',  a  =  [params^XDeltaJ  A  fl  =  [^ 


xek 


!  Params.XDelta 


=  1 
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[  Params.YDelta. 


Ac'  =  I 


yek 


[  Params.YDelta 


A 


z  =  Alt{a,  c,  xgj,  ygj)  A  z'  =  Alt{a' ,  d ,  xek,  yek) A 
(Vn,  1  <  n  <  Params.SampleRate  —  1, 


{3r,p,q,r 


_ n _ 

Params.SampleRate 


.P  = 


xgj-krx(x€k--xgj)  I 

Params.XDelta  J 


yQ  = 


ygj'krxjyek-ygj)  I 

Params.YDelta  J 
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(z  +  r  X  (z'  -  z))  >  Alt{p,q,xgj  +  r  X  {xek  -  xgj),  ygj  +  r  x  {yek  -  ygj))))) 

Condition  III: 

(((-if)  A  Clear{B,  g,j,  e,  k,  Mainloop))  V  (i  A  -'Clear{B,g,j,  e,  k,  Mainloop)))A 
Obvious{B,g,j,  e,  k,  Mainloop)  A 

(Vt,0  <  Duration,  t  ^  Mainloop  — >  ->EObserve{B,g,e,t)) 


6.4:  Program  infinite  loops  when  Duration=0 
Condition  I:True 
Condition  II:Duration  =  0 
Condition  III:True 
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6.5;  Improper  calculation  of  Available  Weapons 

Condition  I: 

Active(B,  g)  A  Params.NumWTypes  >  OA 

3w,  1  <  <  Params.NumWTypes,  A^umWeapon(5, 5^,  tt;,  Mainloop)  >  OA 

3i,  1  <  i  <  NumWeapon{B,  g,w,  Mainloop), 

(aiB, ff,u...(Mainloop)  oo  V  ayB,5,,„,,(Mainloop)  ^  00 

Condition  IlrTrue 
Condition  III: 

3e,  Active{-<B,  e), 

(V<,0  <i<  M&mloop,  ->EObserve{B ,  g ,  e,t))  A  £^06serue(5,y,e,Mainloop)A 
3/:,!  <  k  <  Army[-'B,  e]. Squadrons,  JE^ndurance(-'B,  e, Mainloop)  >  OA 
lnRange{B,g,  w,  e,  k,  Mainloop)  A 

1  <  <  Params.NumWTypes,  tt;'  ^  w  —* 

{-<InRange{B^  g,  w',  e,  k,  Mainloop)  V  NumW eapon{B,  y,  w',  Mainloop)  <  0) 


6.6:  Divide  by  Zero  when  assigning  target  coordinates 

Condition  I: 

Active{B,  g)  A  Aciiv€(-‘B,  e)  A  Params.NumWTypes  >  OA 
EObserve{B ,  g,  e,  Mainloop  —  1) 

Condition  II: A^umlTeapon(B, y,  1,  Mainloop)  <  0 
Condition  IILTrue 

6.7:  Non-reinitialized  pointer  in  SufferAttrition 

Condition  I: 

Active{B,  g)  A  Aciive{-iB,  e)  A  Params.NumWTypes  >  0  A  Mainloop  >  2A 
3i,  1  <  I  <  Params.NumWTypes,  Army[B,  y].Weapon[t].UseLimit  >  OA 
NumlVeapon(B,  g,t,  Mainloop)  >  0  A  Army[B,y].Weapon[i].FireRate  >  OA 
Army[B,y].WeapPriority[e,  i]  >  OA 

3j,  1  <  i  <  Army[j5,y]. Squadrons,  Endurance(B,g,j,  Mainloop  —  2)  >  OA 
3k,  1  <  k  <  Arm3'[-'j5,  e]. Squadrons,  Endurance{->B,  e,  k,  Mainloop  —  2)  >  OA 
Observe{B,g,j,  e,  k,  Mainloop  —  2)  A  InRange{B,  g,  w,  e,  k,  Mainloop  —  2) 

Condition  II:True 
Condition  III:True 
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6.8:  Undefined  pointer  reference  in  Suffer  Attrition 

Condition  I: 

Active{B,  g)  A  Active{-<B,  e)  A  Params.NumWTypes  >  0  A  Mainloop  >  2A 
3i,  1  <i<  Params.NumWTypes,  Army[B,y].Weapon[t].UseLimit  >  OA 
NumW€apon{B, g,i, Ma.inloop)  >  0  A  Army[.B,5r].Weapon[t].FireRate  >  OA 
Army[5,  y].WeapPriority[e,  ?]  >  OA 

Army[5, 5']. Squadrons,  Endurance{B,g,  j,  Mainloop  —  1)  >  OA 
3k,  I  <  k  <  Army[-i5,  e]. Squadrons,  Endurance{-<B,  e,  k,  Mainloop  —  1)  >  OA 
Observe{B,g,j,  e,  k,  Mainloop  —  1)  A  lnRange{B,g,  w,  e,  k,  Mainloop  —  1) 

Condition  II:True 
Condition  IIIrTrue 

6.9:  No  initialization  of  Observations. NumObserved 

Condition  I:Active(B,  g)  A  Active{-<B,  e)  A  EObserved{B ,  g,  e,  1) 

Condition  II:True 
Condition  II: 

Params.NumWTypes  >  OA 

3ii>,  1  <  ly  <  Params.NumWTypes,  Army[B,^].WeapPriority[e,  ly]  >  OA 
NumWeapon{B,g,w,2)  >  0  A  Army[B,  ^].Weapon[iy].FireRate  >  OA 
Army[5,  ^].Weapon[iy].UseLimit  >  OA 

Army[5,^].Weapon[t^].Range  >  y(AB..(l)  -  A^s,e(l))2  +  (>b.,(1)  -  KB.e(l))2 

6.11:  Command  message  improperly  dropped  from  Commands- 
Finished  list 
Condition  I: 

Active{B,  g)  ANCmsgs[5]  >  OA 

3m,  1  <  m  <  NCmsgs[B],  5,  m,  Mainloop)  A m,  Mainloop  —  1)A 

3n,l  <  n  <  NCmsgs[5],m  <  n  A  Mimp{B,g,n,  Mainloop) A 
-<Mimp{B,g,n,  Mainloop  —  1)  A  Cmsgs[5,  m]. Priority  >  Cmsgs[B,  nj. Priority 

Condition  II:True 
Condition  III:True 


6.12:  Substitution  of  ComJamEfF  for  ComJamRadius 

Condition  I: 

Active{B,  g)  A  Active{-'B,e)  A  A^umi?ec( jB,  Mainloop)  >  OA 
(NCmsgs[JB]  >  0  A  3m,  1  <  m  <  NCmsgs[jB],i?ecr(5,5,m)  =  Mainloop)V 
(Active{B ,  f)  A  Army[5,  /]. Report  =  g  A  NumSend{B,  /,  Mainloop)  >  OA 
SomeObserve{B ,  —  RepT(B,f,g))  A  Army[-'5,  e].ComJamEff  >  0 

Condition  II:Army[-ijB,  e].ComJamEff  ^  Army [-> jB,  e]. ComJamRadius 
Condition  III:True 

6.13:  Command  messages  implemented  in  destroyed  battalions 

Condition  I: 

3B,  B  G  {True,  False},  NArmy[B]  >  0  A  NCmsgs[5]  >  OA 
3Mainloop,  1  <  Mainloop  <  Duration, 

3m,  1  <  m  <  NCmsgs[B],l  <  Cmsgs[5,  m].Dest  <  NArmy[jB]A 
s(B,  Cmsgs[5,  m].Dest,  Cmsgs[B,  mj.Time)  >  OA 
Mimp{B,  Cmsgs[fi,  mJ.Dest,  m,  Mainloop) A 
-^Mimp{B^  Cmsgs[5,  m].Dest,  m,  Mainloop  —  1) 

Condition  II:s(5,  Cmsgs[B,  mJ.Dest,  Mainloop)  <0 
Condition  III:Cmsgs[jB,  m].msg  7^  Army [jB,  Cmsgs[5,  m]. Best] 

6.14:  InOwnObsv  in  UpdateLL  is  not  initialized 

Condition  I: 

Active{B,  g)  A  Active{-<B ,e)  A  Active{B,f)  A  Army[5, /]. Report  =  gA 
1  <  J  <  Army[B, 5]. Squadrons,  £’n(iurance(jB, 5,  j,  Mainloop)  >  OA 
3Ar,  1  <  k  <  Armyf-ijB,  e]. Squadrons,  Enc?urance(-'B,  e,  A:,  Mainloop)  >  OA 
Observe{B,  g,  j,  e,  k,  Mainloop)  A 

3^,0  <  t  =  Mainloop  —  R€pT{B,  f,  g)  —  Army[B,^].ProcDelay— 

_ Army[B  ,g]  .RecRat  e _ 

7Vum/2ec(B,p,Mainloo];>— ArTny[B,p].ProcDelay)  ’ 

1  <  /  ^  Army[5, /]. Squadrons,  En(iurance(5, t)  >  OA 
Observe{B,  f^j\  e,  A-,  t) 

Condition  II:True 

Condition  III:A'^B,e,fc(Mainloop)  7^  X^B,e,k{^)  E-,B,e,it(Mainloop)  7^  V-B.e.kit) 
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6.15:  NewArmy  not  updated  after  command  message 

Condition  I: 

Active{B,  g)  A  Mainloop  =  Duration  A  NCmsgs[B]  >  OA 

3m,  1  <m<  NCmsgs[5],  Mimp(B,^,  m,  Duration)  A -'Mimp(B,  m,  Duration  —  1) 

Condition  II:Cmsgs[5,  mj.msg  Army[B,p] 

Condition  III:True 

6.16:  Observe  blocked  when  Params.SampleRate  =  2 

Condition  I: 

Active{B,  g)  A  Active{->B,  e)  A 

1  <  Army[5,  ^]. Squadrons,  Mainloop)  >  OA 

31%  1  <  k  <  Army[-'B,  e]. Squadrons,  £^n<iurance(-ijB,  e,  1:,  Mainloop)  >  OA 
BigEnough{B,  g,  j,  e,  k,  Mainloop) 

Condition  II:Params.SampleRate  =  2 
Condition  IIIrTrue 

6.17:  NumWeapons>0  when  Army. Weapon. FireRate=0 

Condition  I: 

Active{B,g)  A  Active{->B,e)  A  Params.NumWTypes  >  OA 
3i,  1  <  i  <  Army[B,  Squadrons,  Fndurance(5,^,j,  Mainloop)  >  OA 
31:,  1  <  k  <  Army[-'B,  e]. Squadrons,  £'ndurance(-iB,  e,  1:,  Mainloop)  >  OA 
Observe{B,g,j,  e,  1%  Mainloop  —  1)A 

3to,  1  <w<  Params.NumWTypes,  A'^umH'^eapon(5,^,  to,  Mainloop)  >  OA 
lnRange{B,g,w,  e,  1:,  Mainloop)  A  Army[B,  y].  Weapon  [to]. UseLimit  >  OA 
Army[B,^].WeapPriority[e,  to]  >  0 

Condition  II:ArmyfB, o].Weaponfto].FireRate  =  0 
Condition  III: 

^<,0  <t  <  Duration, 

1  <  j'  <  Army[B, ^]. Squadrons,  £’rtdt/raTtce(B, t)  >  OA 
31’',  1  <  1'  <  Armyl'-'B,  e]. Squadrons,  Endurance{-<B ,  e,  1',  t)  >  OA 
Observe{B,g,j',  e,  k',t  —  1)A 

3io',  1  <  to'  <  Params.NumWTypes,  A^umWeapoTt(S,  to',  t)  >  OA 
/rtRaTtpe(B,^,  to',  e,  1',  t)  A  Army[.R,  ^].Weapon[to'].UseLimit  >  OA 
Army[B,  ^].WeapPriority[e,  to']  >  0  A  Army[B,  ^].Weapon[to'.FireRate  >  0 
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6.18:  Report  messages  blocked  by  bad  condition 

Condition  I: 

Active{B,  g)  A  Active{-iB ,  e)  A  Active{B,  f)  A  ArmyfB,  /]. Report  =  gA 
3t,0  <  t  =  Mainloop  —  RepT{B,f,g)  —  Army[5, ^].ProcDelay— 

_ Army[B,g].RecRate  _ 

NumRec(B, p, Mainloop— Army [fi,c;).ProcDelay)  ’ 

EObserve{B,  f,e,t—  1)  A  NumSend{B,  f,t)  >  0  A  Army[B,  /J.ObsXpire  >  0 
Condition  IltTrue 

Condition  0  <  t'  <  Dmation,  EObserve{B,g,e,t') 

6.20;  Destroyed  battalions  not  initialized 

Condition,I:True 

Condition  II: 

3B,B  €  {True,  False},  NArmy[B]  >  OA 

3^,1  <  g  <  NArmy[B],  Army[5,5']. Squadrons  <  0 

Condition  IlrTrue 

6.23:  UseLimit  not  checked  until  after  first  weapon  use 

Condition  I: 

Active{B,  g)  A  Active{->B ,  e)  A  Params.NumWTypes  >  OA 
3i,  1  <  i  <  Army[B,  5]. Squadrons,  £’ndurance(B,  5',  j,  Mainloop)  >  OA 
3k,  \  <  k  <  Arinyf-iB,  e]. Squadrons,  £'ndurance(-'B,  e, Mainloop)  >  OA 
Obstrve{B,g,i,  e,  k,  Mainloop  —  l)A 

3rr;,  1  <  w  <  Params.NumWTypes,  A’^umiyeapon(B,  in,  Mainloop)  >  OA 
lnRange{B,g,  w,  e,  k,  Mainloop)  A  Army[5,^].Weapon[in].FireRate  >  OA 
Army[B,y].WeapPriority[e,  in]  >  0 

Condition  II:Army[B, ^].Weapon[in]. UseLimit  =  0 
Condition  III: 

^i,0  <t<  Duration, 

3i',  1  <  i'  <  ATmy[B,g].Squa.drons,Endurance{B,g,j',t)  >  OA 
3k',  I  <  k'  <  Army[-iB,  e], Squadrons,  £'ndurance(-'B,  e,  t)  >  OA 
Observe{B,g,j',  e,  k',  t  —  1) A 

3w',  I  <  w'  <  V&r&ms.'NumWTypes,  NumWeapon{B ,  g,w' ,t)  >  OA 
InRange{B,  g,  w',  e,  k',t)  A  Army[5,  ^].Weapon[in']. UseLimit  >  OA 
Army[5, 5].WeapPriority[e,  in']  >  0  A  Army[B,5].Weapon[in'.FireRate  >  0 
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6.24:  Available  processors  don’t  include  just  finished  commands 
and  reports 
Condition  I: 

Active{B,  g)  A  ((NCmsgs[B]  >  OA 

3m,  1  <  m  <  NCmsgs[J5],  A/zmp(J5,5',  m,  Mainloop)A 

-’A/imp(5,5',m,Mainloop  —  1))V 

(Active{B,  f)  A  Active{->B,  e)  A  Armj'[B,  /]. Report  =  gA 
3t,0  <  t  =  Mainloop  —  RepT{B,  f^g)  —  Army[fi,  pj.ProcDelay— 

_ ArmyfB  .RecFUte _ 

NumH€c(B,g ,Mainloop— ArTny[B ,p] .ProcDelay)  ’ 

EObserve{B,  f,e,t—  1)  A  NumSend{B^  f,  t)  >  0)) 

Condition  II: 

CmdSum{B,g,  —1,  Mainloop)  +  ReptSum{B,  g,  —1,  Mainloop) 

>  NumProcess(B,  g,  Mainloop) 

Condition  III:True 
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Failure  Regions  in  Version  7 


7.1:  VisableSquad  return  upredictable  on  destroyed  squadrons 

Condition  l:Active{B,g)  A  Aciive{->B,  e) 

Condition  II: 

(3j,  1  <j<  Army[B, S']. Squadrons,  £'ndurance(B,  S',  Mainloop)  <  0)V 
(3A:,  1  <  k  <  Army[-iB,  e]. Squadrons,  £'ndurance(-'5,  e,  A;,  Mainloop)  <  0) 

Condition  III:^<,0  <  t  <  Duration,  £0fc5erue(B,s,e,t) 

7.2:  Division  by  zero  Num Weapon  in  InflictAttrition 

Condition  I: 

Active{B,  g)  A  Active{->B,  e)  A  Params.NumWTypes  >  OA 
3k,  I  <  k  <  Armyl-iB,  e]. Squadrons,  Endurance{->B,  e,  k,  Mainloop  —  2)  >  OA 
{3j,l  <  j  <  Army[B,  e]. Squadrons,  £^ndurance(B,s,i,  Mainloop  —  2)  >  OA 
Observe{B,  g,j,  e,  k,  Mainloop  —  2))  A 

3iu,  1  <  itJ  <  Params.NumWTypes, /ni?anse(5,  s,  e, Mainloop  —  1)A 
Army[5,  s]-WeapPriority[e,  u’]  >  0  A  NumW eapon{B,  g,  w,  Mainloop  —  1)  >  OA 
Armj'[B,s]-Weapon[u)].FireRate  >  0  A  Army[B,  s]-Weapon[it;].UseLimit  >  0 

Condition  II:A'^itmTTeapon(B,s,  ui,  Mainloop)  =  0 
Condition  III:True 

7.3:Division  by  zero  NumObserv Array  in  InflictAttrition 

Condition  I: 

Active{B,  g)  A  Active{-'B,e)  A  Params.NumWTypes  >  OA 
3k,  1  <  k  <  Army[-i5,  ej. Squadrons,  Endurance{->B ,  e,  k,  Mainloop  —  2)  >  OA 
(3j,  1  <  j  <  Army[S,  e]. Squadrons,  £ndurance(B,s,i,  Mainloop  —  2)  >  OA 
Observe(B,  g,j,  e,  k,  Mainloop  —  2)) A 

3it',  1  <  te  <  Params.NumWTypes,  InRange{B,  g,  w,  e,  k,  Mainloop  —  1)A 
Army[5,s].WeapPriority[e,  t/;]  >  0  A  A'^umW^eapon(B,s,  Mainloop)  >  OA 
Army[B,s].Weapon[ii;].FireRate  >  0  A  Army[£,  sj.Weaponlit^j.UseLimit  >  0 

Condition  Il:-tEObserve{B ,  g,  e,  Mainloop) 

Condition  III:True 
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7.4:  Bad  count  of  busy  command  processing  squadrons 
Condition  I: 

Active{B,  g)  A  ((NCmsgs[jB]  >  OA 

3m,  1  <  m  <  NCmsgs[B],M^mp(B,^,m,Mainloop)A 

-I AI imp{B,  g,  m,  Mainloop  —  1))V 

{Active{B,  f)  A  Active{->B,  e)  A  Army[B, /]. Report  =  gA 
3t,0  <  t  =  Mainloop  —  RepT{B,f,g)  —  Army[B,p].ProcDelay— 

_ Army  [B  ,g]  .RecFlate _ 

NuTnRec(B^g .Mainloop- Army [B ,p].ProcDelay)  ’ 

EObserve{B,  —  1)  A  NumSend{B,  /,  i)  >  0)) 

Condition  II: 

CmdSuTn{B,g,  —1,  Mainloop)  +  ReptSum{B,g,  —1,  Mainloop) 

>  NumProcess{B,g,M&in\oop) 

Condition  IIIrTrue 

7.5:  Bad  check  in  Observation 

Condition  l:Active{B,  g)  A  Active{-'B,  e)  A  EObserve{B,  g,  e,  Mainloop) 
Condition  II:Active(B,  f)  A  f  >  g  A  EObserve{B,  /,  e,  Mainloop) 

Condition  III: 

1  <  t  <  Duration,  £'06serz;e(B, /,  e,  t)A 
V/',  1  <  f  <  f,->EObserve{B,f',€,t) 


7.6:  Bad  condition  on  NArmy  check 

Condition  I:Duration  >  0 

Condition  11:3B,B  €  {True,  False),  NArmy[B]  =  0 
Condition  III:True 

7.7:  Improperly  rejected  ObsXpire=0 
Condition  I:Duration  >  0  A  3B,B  6  {True,  False),  NArmy[5]  >  0 
Condition  II:3p,  1  <  g  <  NArmy[B],  Army[B,p].ObsXpire  =  0 
Condition  III:True 

7.8:  Improperly  rejected  ProcDelay=0 
Condition  I:Duration  >  0  A  3B,B  e  {True,  False),  NArmy[B]  >  0 
Condition  Il:3g,  I  <  g  <  NArmy[B],  Army[B, pj.ProcDelay  =  0 
Condition  III:True 
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7.9:  No  report  communication 

Condition  I: 

Active{B,g)  A  Active(-^B,e)  A  Active{Byf)  A  Army[5, /]. Report  =  gA 
3t,0  <  t  =  Mainloop  —  RepT{Byf,g)  —  Army[B, ^j.ProcDelay— 

_ Army  [B  ,g]  .RecRate _ 

N  um  Rc  cet  vc(B ,  j  ,Mainloop— Army  [B  ,p) .  ProcDelay  ’ 

EObserv€{B,  f,e,t  —  1)  A  NumSend{B,  /,  t)  >  0  A  Army{5,  /j.ObsXpire  >  0 
Condition  II:True 

Condition  III:  0  <t'  <  Duration,  EObserve{B,  p,  e,  t') 

7.10:  Misplaced  reinitialization  of  variable  in  Observation 

Condition  l:Active{B,g)  A  Active{-'B,  e) 

Condition  II: 

3^:,  1  <  A;  <  Army[-'5,  e]. Squadrons,  £^ndurance(-'B,  e,  fc,  Mainloop)  >  OA 
{3j,l  <i  <  Army[B,  pj. Squadrons,  £'n<iurance(B,p,j,  Mainloop)  >  OA 
Observe{B,  p,  j,  e,  k,  Mainloop))  A 

3k',  k  <  k'  <  Army[->B,  ej. Squadrons,  £'ndurance(->5,  e, /:'Mainloop)  >  OA 
(3^',  1  <  j'  <  Arm3’[5,p]. Squadrons,  Endurance(B,g,j',  Mainloop)  >  OA 
Observe{B,g,j',  e,  k',  Mainloop)) 

Condition  III: 

Params.NumWTypes  >  0  A  Mainloop  +  1  <  DurationA 

3u;,  1  <w<  Params.NumWTypes,  A^umVPeapon(B,p,  ly,  Mainloop  +  1)  >  lA 
Army[B,p].Weapon[ti?].FireRate  >  0  A  Army[B,  p].Weapon[ti)].UseLimit  >  OA 
Army[B,p].WeapPriority[e,  to]  >  lA 

<  Army[B,p].WeaponH.Damage+  Armyh5,e].Wear 
<  Endurance{-fB ,  e,  k,  Mainloop  +1) 

7.11:  Segmentation  Violation  if  battalion  leaves  terrain  grid 

Condition  I:(Duration  >  0) 

Condition  II: 

3B,  q,Active(B,  p)A 

(Ab,p  <  0  V  Yb,,  <  0) 

Condition  III:True 
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7.12:  Restoration>0  after  FixSuppl=0 
Condition  l:Active{B ,  g)  A  NumCas{B,  g,M8im\oop  —  1)  >  0 
Condition  II:5upp/(B,5,  Mainloop  —  2)  <  0 
Condition  III: 

3i)  1  ^  i  ^  Army[5,^]. Squadrons, 

^  Endurance{B,g,j,U^m\oop  -  1)  - 

7.13:  Wrong  variable  on  loop  in  Observation 

Condition  l:Active{B ,  g) 

Condition  II:NArmy[5]  ^  NArmy[->B] 

Condition  III: 

(NArmy[B]  >  NArmy[-'B])V 

(NArmy[B]  <  NArmy[->B]A 

3e,NArmy[B]  <  e  <  NArmy[->5],  Ac<iue(->5,  e)A 

EObserve{B,g,  e,  Mainloop)) 


7.14:  Command  with  0  squadrons  doesn’t  destroy  battalion 

Condition  I: 

Aciive{B,  g)  A  NCmsgs[S]  >  OA 

3m,  1  <m<  NCmsgs[5],  i\/imp(S,  5,  m,  Mainloop)  A  ->Mimp{B,  g,m,Ma.\n\oop  —  1) 

Condition  II:Cmsgs[5,  mj.msg. Squadrons  =  0 
Condition  III:True 

7.15:  NumWeaponToUse  not  initialized 

Condition  l:Active{B,  g)  A  Active{-iB,  e)  A  EObserve{B,  g,  e,  Mainloop) 

Condition  II: True 

Condition  III:Mainloop  <  Duration  —  1 

7.16:  Does  not  reject  Army.NumFixers  >  Army.Squadrons 

Condition  I:(Duration  >  0) 

Condition  II: 

{3B,B  E  {l...NArmy[true]}, 

Army[true,  5].NumFixers  >  Army[true,  B]. Squadrons) V 
{3B,B  6  {l...NArmy[false]}, 

Army[false,  .Sj.NumFixers  >  Army[false,  Bj. Squadrons) 

Condition  III:True 
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7.17:  Does  not  reject  Army. Num Jammers  >  Army. Squadrons 

Condition  I:(Duration  >  0) 

Condition  II: 

(BB,B  G  {l...NArmy[true]}, 

Army[true,  5].  Num  Jammers  >  Army[true,  5].Squadrons)V 
{3B,B  G  {l...NArmy[false]}, 

Army[false,  5].NumJammers  >  Army[false,  5]. Squadrons) 

Condition  IIIrTrue 

7.18:  Does  not  reject  Army.NumProcess  >  Army.Squadrons 

Condition  I:(Duration  >  0) 

Condition  II: 

{SB,B  G  {l...NArmy[true]}, 

Army[true,  Bj.NumProcess  >  Army[true,  B]. Squadrons) V 
{3B,B  G  {l...NArmy[false]}, 

Army  [false,  Bj.NumProcess  >  Army[false,  5]. Squadrons) 

Condition  III:True 

7.19:  Does  not  reject  Army.NumReceive  >  Army.Squadrons 

Condition  I:(Duration  >  0) 

Condition  II: 

{3B,B  G  {l...NArmy[true]}, 

Army[true,  Bj.NumReceive  >  Army[true,  B]. Squadrons) V 
{3B,B  G  {l...NArmy[false]}, 

Army[false,  B].NumReceive  >  Army[false,  J5]. Squadrons) 

Condition  III:True 

7.20:  Does  not  reject  Army.NumSend  >  Army.Squadrons 

Condition  I:(Duration  >  0) 

Condition  II: 

{3B,B  G  {l...NArmy[true]}, 

Army[true,  Bj.NumSend  >  Army[true,  Rj. Squadrons) V 
{3B,B  G  {l...NArmy[false]}, 

Army[false,  5].NumSend  >  Army[false,  R]. Squadrons) 

Condition  III:True 
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7.21:  Does  not  reject  Cmsgs.msg.NumFixers  > 
Cmsgs.msg. Squadrons 
Condition  I: 

3B,  B  €  {true, false), 

(3/,l  <  /  <  NArmy[5], 

(3m,  m  6  { l...NCmsgs[ 5]},  A/imp(5, /,  m.  Duration))) 

Condition  II; 

Cmsgs[5,  m].msg.NumFixers  >  Cmsgs[5,  mj.msg. Squadrons 
Condition  IILTrue 

7.22;Does  not  reject  Cmsgs.msg.Num Jammers  > 
Cmsgs.msg. Squadrons 
Condition  I: 

3B,  B  e  {true, false), 

(3/,l  <  /  <  N Army [5], 

(3m,  m  6  {l...NCmsgs[B]),  Mimp(B, /,  m,  Duration))) 

Condition  II: 

Cmsgs[B,  mj.msg. NumJammers  >  Cmsgs[.B,  mj.msg. Squadrons 
Condition  IIIcTrue 

7.23:  Does  not  reject  Cmsgs.msg. NumProcess  > 
Cmsgs.msg. Squadrons 
Condition  I; 

3B,  B  G  {true, false), 

(3/,l  <  /  <  NArmy[Bj, 

(3m, m  G  {l...NCmsgs[Sj),  iV/2mp(.B, /,  m.  Duration))) 

Condition  II: 

CmsgsfB,  mj.msg. NumProcess  >  Cmsgs[.B,  mj.msg. Squadrons 
Condition  III:True 
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7.24:  Does  not  reject  Cmsgs.msg.NumReceive  > 
Cmsgs.msg.  Squadrons 
Condition  I: 

3B,  B  6  {true, false}, 

(3/,l  <  /  <  NArmy[5], 

(3m,  m  €  {l...NCmsgs[5]},  /,  m.  Duration))) 

Condition  II: 

Cmsgs[B,  mj.msg.NumReceive  >  Cmsgs[5,  mj.msg. Squadrons 
Condition  IIIrTrue 

7.25:Does  not  reject  Cmsgs.msg. NumSend  > 

Cmsgs.msg. Squadrons 

Condition  I: 

3B,  B  €  {true,  false}, 

(3/,l  <  /  <  NArmy[B], 

(3m,  m  €  {l...NCmsgs[B]},  il/imp(B, /,  m.  Duration))) 

Condition  II: 

Cmsgs[B,  mj.msg. NumSend  >  Cmsgs[B,  mj.msg. Squadrons 
Condition  III:True 

7.27:  Divide  by  zero  KF  in  CalcNumWeapToUse 

Condition  I: 

Active{B,  g)  A  Active{-<B,  e)  A  Params.NumWTypes  >  OA 
3ii;,  1  <w<  Params.NumWtypes,  A'^umfFeapon(B,5r,  It),  Mainloop)  >  OA 
3i,  1  <  J  <  Army[.B, ^j. Squadrons,  Fn<iurance(B, 5r,j,  Mainloop)  >  OA 
3k, 1  <  k  <  Armj^-iS,  ej. Squadrons,  Fndurance(-'.B,  e,  Mainloop)  >  OA 
Observe{B,g,j,  e,  k,  Mainloop  —  1)  A  InRange{B,  g,  w,  e,  k,  Mainloop  —  1) 

Condition  II:Army[B,5'j.Weapon[r/;j.FireRate  =  0 
Condition  III:True 
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7.28:  Number  Variables  exceed  initial  values 

Condition  I: Aciive{B,g)  A  NumCas(B,g,  Ma.m\oop—  1)  >  0 

Condition  Mainloop)  <  Mainloop—l)—A^ Mainloop) 

Condition  IIIrTrue 

7.29;  Double  increments  of  Weapon  and  Target  index 

Condition  I: 

Active{B,  g)  A  Active(-iB,  e)  A  Params.NumWTypes  >  0  A  Mainloop  >  2A 
1  <  j  <  Army[5,^]. Squadrons,  Endurance{B,g,j,  Mainloop)  >  OA 
3^,1  <  k  <  Army[-'B,  e]. Squadrons,  £Jndurance(-'B,  e,  A:,  Mainloop)  >  OA 
3uj,  1  <w<  Params.NumWTypes,  A^um Weapon  (5, 5^,  u;,  Mainloop)  >  lA 
Observe{B,g,j,  e,  k,  Mainloop  —  2)  A  InRange{B,  g,  w,  e,  k,  Mainloop  —  1)A 
Army[B,  p].WeapPriority[e,  to]  >  1  A  Army[S,p].Weapon[u)].UseLimit  >  OA 
Army[B,  p].Weapon[io].FireRate  >  0 

Condition  II: 

I  ^  j'  ^  Army[B,p]. Squadrons,  Endurance{B,g,j\  Mainloop  —  2)  >  OA 
Observe{B,g,j\  e,  —  1,  Mainloop  —  2) 

Condition  III;Army[B, p].Weapon[u;]. Damage  >  0 
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7.32:  Numeric  Precision  fault  in  Series 

Condition  I: 

Active{B,  g)  A  Active{->B,  e)  A  Params.SampleRate  >  2A 
3j,  1  <  j  <  Army[B, g]. Squadrons,  £n<fitrance(B, 5,  Mainloop)  >  OA 
3k, 1  <k<  Army[-'5,  e]. Squadrons,  £n<iur(2nce(-i5,  e, Mainloop)  >  OA 
BigEnough{B,  g,j,e,  k,  Mainloop) 

Condition  II: 


logj (Params.SampleRate)  ^  [log2(Params.SampleRate)J 
Condition  III: 

xgj  =  j(Mainloop  -  1)  A  ygj  =  i/B,fl,i(Mainloop  -  1)A 
xtk  =  x-,B,e,fc(M^iiiloop  —  1)  A  yek  =  t/_,B,e,fc(Mainloop  —  1)A 


(Va,a',  c,  c',  z,  z\a  = 


^93 


Par  ams.X  Delta 


J  A<.'=  [ 


xek 


Parcims.XDelta 


A 


=  l 


ygj 


Params .  YDel  t  a 


A  c' 


=  1 


yek 


[  Parfuns.YDelta^ 


A 


z  =  Alt{a,  c,  xgj,  ygj)  A  z'  =  Ali{a',  c',  xek,  yek)A 
(Vn,l  <  n  <  20°82(Params.SampleRate)J  _ 

(j3v ,  p ,  g ,  X  ,  y  ,  v  — 1  ’ 

x'  =  xgj  +  r  X  (xek  -  xgj),  y'  =  ygj  +  r  x  (yek  -  ygj), 

P  [  Params.XDeltaJ  I  Params.YDelta  j  ’ 


(z  +  r  X  (z'  -  z))  >  Alt{p,  q,  x',  y') 
)  )  A 

«B  I{a\c'  yXek , yek)  ATmy[-~>B  ,e].Squ&dlniensity{k] 

B  J(a\c'  yXekyyek) 


_^2 
Z-^n=l 


((iPO  (^xgj  X  ^  ypj  X  2lipg2<p»»’'>p^*'s.mpL»«)j  i  Malnloop)  X 

Army[B,  5].VWEfFect)+ 


NArTny[-»B] 

E 

e'=l 


0  if 


(x^B.e' (Mainloop  -\)-xgj  x  _i )  + 

\  (y-,B,e' (Mainloop  -  1)  -  ygj  x  _i ) 

>  Army[-'B,  e'j.ObsJamRadius 


^x-,B,e'(Mainloop  — 

1) 

-  xgj  X 

nx(xek—xgj)  \ 

2  Llog2(Par^n'*  SampleRa.te)J  j 

(y-,B.e'( Mainloop  - 

1) 

-  ygj  X 

nx(yek-ygj)  \ 

2  / 

Army  [-'B  ,eT  .ObsJam  Radius 

xArmyf-iB,  e'j.ObsJamEfF  otherwise 
)  )  <  Army[B,  ^I.ObsMinContrastiy])) 
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7.33:  Undefined  value  when  battalion  leaves  terrain  grid 

Condition  I:(Duration  >  0) 

Condition  II: 

3B ,  g  ,Aciive{B ,  g)h 

(A'’B^p(Mainloop)  >  Params.XDelta  x  MaxTerrainV 
Ifi.sCMainloop)  >  Params.YDelta  x  MaxTerrain) 

Condition  III:True 

7.35:  Invalid  expiration  of  observations 

Condition  l:Active{B,g)  A  Active{-'B,e)  A  EObserve{B,g,e,Ma.m\oop) 
Condition  II:Army[B,^].ObsXpire  <  2 
Condition  III: 

Mainloop  <  Duration  —  1  A  Params.NumWTypes  >  OA 

1  <  <  Params.NumWTypes,  A^umIPeapon(B,^,  Mainloop  +  1)  >  OA 

Army[B,^].WeapPriority[e,uj]  >  0  A  Army[B,^].Weapon[iy].UseLimit  >  OA 
Army[5,^].Weapon[u7]. Range  >  0  A  Army[B,^].Weapon[ry]. Damage  >  OA 
Army[B,^].Weapon[iij].FireRate  >  0 
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Failure  Regions  in  Version  8 


8.1:  Divide  by  zero  in  UpdateKA 

Condition  I: 

Active{B,g)  A  Active{-'B,e)  A  Params.NumWTypes  >  OA 

1  ^  J  <  Army[5,  ^]. Squadrons,  £^ndurance(5, Mainloop)  >  OA 
3^',  1  <  k  <  Army[“'5,  e]. Squadrons,  £ndurance(->5,  e,  fc,  Mainloop)  >  OA 
Observe{B,g,j,  e,  fc,  Mainloop)A 

3ro,  1  <  w  <  Params.NumWTypes,  NumWeapon{B,  g,  w,  Mainloop)  >  OA 
InRange{B,gyW^  e,  fc, Mainloop)  A  Army[5,^].Weapon[itj].FireRate  >  OA 
Army[B,p].WeapPriority[e,  tt)]  >  0 

Condition  II:Army[B,5].Weapon[io].UseLimit  =  0 
Condition  IIIrTrue 

8.2:  Divide  by  zero  in  SquadPos 

Condition  l:Activ€{B,g) 

Condition  II:Army[B,^].Grow  =  0 
Condition  IIIrTrue 

8.3:  No  check  on  send  time  for  equal-priority  messages  at  start 
of  queue 

Condition  l:Active{B,g)  A^Cmsgs[B]  >  1 
Condition  II: 

3m, 1  <  m  <  NCmsgs[5],  Mimp(5,^,  m,  Mainloop)  A  ->Mimp(5, 5',  m,  Mainloop  —  1)A 
3n,  1  <  n  <  NCmsgs[5],  n,  Mainloop)  A .0,5',  n,  Mainloop  —  1)A 

Cmsgs[0,  m]. Priority  =  Cmsgs[0,  n]. Priority  A  Cmsgs[0,  m].Time  <  Cmsgs[0,  nj.TimeA 
Cmsgs[0,  mj.msg  7^  Cmsgs[0,  nj.msg 

Condition  III: 

/3m',  1  <  m'  <  NCmsgs[0],  Mimp(0,5',  m'.  Duration)  A  -'Mtmp(0, 5,  m/,  Mainloop) 
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8.4:  Pointer  past  end  of  list  in  PutQue 

Condition  I: 

Active{B,g)  A  NCmsgs[5]  >  lA 
3m,  1  <  m  <  NCmsgs[B],  Cmsgs[B,  mj.Dest  =  gA 
RecT{B,g,m)  <  Mainloop  A  m,  Mainloop)A 

3n,  1  <  n  <  NCmsgs[B],  Cmsgs[B,n].Dest  =  gA 

RecT{B,  g,  n)  =  Mainloop  A  Cmsgs[B,  mj.Priority  =  Cmsgs[B,  n]. Priority 
Condition  II: 

/3m',  1  <  m  '  <  NCmsgs[5],  Cmsgs[5,  m'j.Dest  =  gA 
m'  ^  m  A  m'  ^  n  A  RecT{B,  g,m')  <  Mainloop)A 
-iM imp{B,  g,  m',  Mainloop) 

Condition  III:True 

8.5:  Infinite  loop  in  InsertMsg 

Condition  I: 

>lct2r;e(B,p)  A  NCmsgs[B]  >  lA 
3m,  1  <  m  <  NCmsgs[B],  Cmsgs[B,  mj.Dest  =  gA 
RecT{B,  g,  m)  <  Mainloop  A  ->M imp{B,g,  m,  Mainloop)A 
3n,  1  <  n  <  NCmsgs[5], Cmsgs[5, nj.Dest  =  gA 
RecT{B,g,n)  =  Mainloop 

Condition  II:Cmsgs[B,  m). Priority  <  Cmsgs[B,  nj. Priority 
Condition  III:True 

8.6:  No  check  on  send  time  for  equal-priority  messages  in  middle 
of  queue 

Condition  l:Active{B,  g)  A  NCmsgsjB]  >  2 
Condition  II: 

3m,  1  <  m  <  NCmsgs[B],  M2mp(B,5,  m,  Mainloop)A 
->Mimp{B,  g,m,  Mainloop  —  1)A 
3n,l  <  n  <  NCmsgs[5],Mimp(B, 5,  n,  Mainloop) A 
->Mimp{B,  g,n,  Mainloop  —  1)A 

3m',  1  <  m'  <  NCmsgsjB],  M2mp(B,5,  m',  Mainloop)A 
->Mfmp(B,p,m',  Mainloop  —  1)A 

Cmsgs[5,  m'j. Priority  >  Cmsgs[B,  mj. Priority  A  CmsgsjB,  m). Priority  =  Cmsgs[5,n].PriorityA 
CmsgsjB,  mj.Time  <  CmsgsjB,  nj.Time  A  CmsgsjB,  mj.msg  Cmsgs[B,  nj.msg 

Condition  III: 

^m',  1  <  m'  <  NCmsgsjB],  Mimp{B ,  g,  m'.  Duration)  A  -^AIimp(B,  g,  m',  Mainloop) 
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8.7:  NC  not  zeroed  on  reciept  of  command  message 

Condition  I: 

Active{B,  g)  A  NCmsgs[5]  >  OA 

3m,  1  <  m  <  NCmsgs[B],  m,  Mainloop)  A  ->Mimp(B,g,m,M&m\oop  —  1) 

Condition  II:A^umCa5(B,5r,  Mainloop)  >  0 
Condition  III: 

/Bn,  1  <  n  <  NCmsgs[5],  Mimp(B,£r,  n.  Duration)  A  m,  Mainloop) 


8.8:  Segmentation  violation  when  squadron  is  off  terrain  grid 

and 


8.10:  Infinite  loop  in  CalcBI 

Condition  l:Active{B^g)  A  Active{-iB,  e) 

Condition  II: 

Sill  ^  j  ^  Army[5,  gr]. Squadrons,  £ndurance(B,  51,  i,  Mainloop)  >  OA 
(A’B,5,j(Mainloop)  <  0  V  yB,5j(Mainloop)  <  0) 

Condition  III:True 

8.9:  Observation  blocked  if  first  squadron  destroyed 

Condition  l:Active{B,g)  A  Active{->B,e) 

Condition  II:£)ndurance(B,gr,  1,  Mainloop)  <  0 
Condition  III: 

Si,  1  <i  ^  Army[5,  Squadrons,  £^ndurance(S,  5', i,  Mainloop)  >  OA 

3^',  1  <  k  <  Army[-i5,  e]. Squadrons,  £ndurance(-iS,  e,  Mainloop)  >  OA 

Observe{B ,  g,j,e,k,  Mainloop)  A 

(/3t,0  <i  <  Ma.m\oop,  EObserve{B,g,e,t))  A 

(^/,  Ach’i;e(B, /),  Army[B, /]. Report  =  gA 

3t,0  <  t  —  Mainloop  —  RepT{B,  f,  g)  —  Army[B,^].ProcDelay— 

_ A  rmy  [B  ,g] .  RecRat  e _ 

Num/2ec(B,5»Majnlooi>— Army [5,5]. ProcDelay)  ’ 

EObserve{B ,  /,  e,  t) 
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8.11:  Excessive  length  loop  in  CalcBI 

Condition  l-.Active{B,g)  A  Active{->B,  e) 

Condition  II: 

1  <  j  <  Army[5, ^]. Squadrons,  £’ndurance(5, 5,  Mainloop)  >  OA 
(A’j3,5j(Mainloop)  >  MaxTerrain  x  Params.XDeltaV 
>3^ j(Mainloop)  >  MaxTerrain  X  Params.YDelta) 

Condition  III:True 

8.12:  No  check  if  RA  <  0 

Condition  I: 

Active{B,g)  A  ((NCmsgs[B]  >  OA 

3m,  1  <  m  <  NCmsgs[B],Cmsgs[5, m].Dest  =  g  A  RecT{B,g,m)  =  Mainloop)V 
{Active{B,  f)  A  Active{-<B,e)  A  Armyi[B, /]. Report  =  gA 
EObserve{B,  /,  e,  Mainloop  —  RepT{B,  f,g)))) 

Condition  II;A'^umRec(R,^,  Mainloop)  <  Com  Mainloop) 

Condition  IIIiTrue 

8.13:  Always  engaged  if  observation  is  within  range 

Condition  I: 

Active{B,  g)  A  Aciive{-'B,  e)  A  Params.NumWTypes  >  OA 
3i,  1  <  i  ^  Army[B,  ^]. Squadrons,  £'ndurance(5,^,_?,  Mainloop)  >  OA 
3t,  1  <  k  <  Army [-iB,  e]. Squadrons,  ^ndiirance(-i5,  e.  A:,  Mainloop)  >  OA 
Observe{B,g,j,  e,  A',  Mainloop) 

Condition  II: 

Vto,  1  <  to  <  Params.NumWTypes,  lnRange{B^  g,  w,  e,  k,  Mainloop)  — > 

(A'^um  Weapon (R,  to,  Mainloop)  <  0  V  Army[R,  p].WeapPriority[e,  lo]  <  OV 
Army[R,p].Weapon[u’].FireRate  <  0  V  Army[.R, p].Weapon[io].UseLimit  <  0) 

Condition  III:True 

8.14:  Divide  by  zero  in  OJ  calculation 

Condition  I: 

Active{B,  g)  A  Active{->B,  e)  A  Params.SampleRate  >  2A 
3i,  1  <  7  <  Army[B, pj. Squadrons,  £’ndurance(B,p,j,  Mainloop)  >  OA 
3A',  1  <  k  <  Army[-i.R,  e]. Squadrons,  £ndurance(-'.5,  e,  Ar,  Mainloop)  >  OA 
BigEnough(B,  g^j,  e,  k,  Mainloop)  A  Clear(B,g,j,  e,  k,  Mainloop) 

Condition  II:3e',  Active{->B,  e'),  Army[-'.R,  e'j.ObJamRadius  =  0 
Condition  III:True 
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8.15:  Version  does  not  observe  when  Params.SampleRate  =  2 

Condition  I: 

Aciive{B,  g)  A  Active{-'B,  e) 

1  ^  Army[B,  5]. Squadrons,  £’ndiirance(5,y,  Mainloop)  >  OA 

31,1  <  k  <  Army[-iB,  e]. Squadrons,  £'ndurance(-'5,  e,  1,  Mainloop)  >  OA 
BigEnough[B,  g,j,  e,  k,  Mainloop) 

Condition  IlrParams.SampleRate  =  2 
Condition  III:True 

8.18:  Destroyed  battalions  still  move 

and 


8.35:  Velocity  undefined  if  battalion  destroyed 

Condition  IrDuration  >  2  A  3B,  B  €  {True,  False),  NArmy[B]  >  0 
Condition  II: 

1  <  5^  <  NArmy[B],  3f,0  <  <  <  Duration  —  l,s{B,g,t)  =  0 
Condition  IIIrTrue 

8.19:  Version  observes  when  Params.SampleRate  <  2 

and 


8.39:  Divide  by  zero  in  FindPoints 

Condition  I: 

Active{B,  g)  A  Aciive{-'B,  e) 

1  ^  Army[B,  5]. Squadrons,  Fndur<znce(B,  5,  j,  Mainloop)  >  OA 

31, 1  <  1  <  Army[-'B,  e]. Squadrons,  £'ndurunce(-iB,  e,  1,  Mainloop)  >  OA 
BigEnough{B,g,j,  e,  1,  Mainloop) 

Condition  II: Params.SampleRate  <  2 
Condition  III:True 

8.23:  Use  of  0  as  fiag  conflicts  with  position  in  width 

Condition  I:Active{B,  g) 

Condition  II: 

1  <  i  <  Army[B,  5]. Squadrons,  £'ndurance(B, 5, y,  Mainloop)  >  OA 
JAfi^g.^yMainloop)  <  0 

Condition  III:Mainloop  =  Duration  —  1 
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8.25:  Does  not  reject  Army.NumFixers  >  Army.Squadrons 

Condition  I; (Duration  >  0) 

Condition  II: 

{3B,B  G  {l...NArmy[true]}, 

Army[true,  5].NumFixers  >  Army[true,  5].Squadrons)V 
{3B,B  G  {l...NArmy[false]}, 

Army[false,  5].NumFixers  >  Army[false,  B]. Squadrons) 

Condition  IIIrTrue 

8.26:  Does  not  reject  Army.Num Jammers  >  Army.Squadrons 

Condition  I;(Duration  >  0) 

Condition  II: 

{3B,B  G  {l...NArmy[true]}, 

Army[true,  Bj.Num Jammers  >  Armyftrue,  B].Squadrons)V 
{3B,B  G  {l...NArmy[false]}, 

Army[false,  Sj.NumJammers  >  Army[false,  B]. Squadrons) 

Condition  IILTrue 


8.27:Does  not  reject  Army.NumProcess  >  Army.Squadrons 

Condition  I:(Duration  >  0) 

Condition  II: 

{3B,B  G  {l...NArmy[true]}, 

Army[true,  BJ.NumProcess  >  Army  [true,  5]. Squadrons)  V 
{3B,B  G  {l...NArmy[false]}, 

Army[false,  5].NumProcess  >  Army  [false,  5]. Squadrons) 

Condition  III:True 


8.28:  Does  not  reject  Army.Num  Receive  >  Army.Squadrons 

Condition  I:(Duration  >  0) 

Condition  II: 

{3B,B  G  {l...NArmy[true]}, 

Army[true,  5].NumReceive  >  Army[true,  B]. Squadrons) V 
{3B,B  G  {l...NArmy[false]}, 

Army[false,  5].NumReceive  >  Army[false,  5]. Squadrons) 

Condition  IILTrue 


91 


8.29:  Does  not  reject  Army.NumSend  >  Army. Squadrons 

Condition  I:(Duration  >  0) 

Condition  II: 

{3B,B  e  {l...NAriny[true]}, 

Army[true,  5].NumSend  >  Army[true,  B]. Squadrons) V 
{3B,B  €  {1...N  Army  [false]}, 

Army[false,  Bj.NumSend  >  Army[false,  B). Squadrons) 

Condition  III:True 

8.30;  Does  not  reject  Cmsgs.msg.NumFixers  > 
Cmsgs.msg.  Squadrons 
Condition  I: 

3B,  B  G  {true, false), 

(3/,l  <  /  <  NArmy[B], 

(3m,  m  6  {l...NCmsgs[B]},  /,  m.  Duration))) 

Condition  II: 

Cmsgs[B,  mj.msg.NumFixers  >  Cmsgs[B,  mj.msg. Squadrons 
Condition  III:True 

8.31:  Does  not  reject  Cmsgs.msg.Num Jammers  > 
Cmsgs.msg. Squadrons 
Condition  I: 

3B,  B  G  {true, false), 

(3/,l  <  /  <  NArmy[B], 

(3m,  77?  G  {l...NCmsgs[B]),  Mimp(B, /,  m.  Duration))) 

Condition  II: 

Cmsgs[B,  mj.msg.NumJammers  >  CmsgsfB,  mj.msg. Squadrons 
Condition  III:True 
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8.32:  Does  not  reject  Cmsgs.msg.NumProcess  > 
Cmsgs.msg. Squadrons 
Condition  I: 

35,  B  G  {true, false), 

(3/,l  <  /  <  NArmy[5], 

(3m,  m  £  {l...NCmsgs[5]},  Mimp(5, /,  m.  Duration))) 

Condition  II: 

Cmsgs[5,  mj.msg.NumProcess  >  Cmsgs[5,  mj.msg. Squadrons 
Condition  IIIrTrue 


8.33:  Does  not  reject  Cmsgs.msg. NumReceive  > 
Cmsgs.msg.  Squadrons 
Condition  I: 

35,  5  €  {true, false), 

(3/,l  <  /  <  NArmy[5], 

(3m,  m  G  {l...NCmsgs[5]),  Mfmp(5, /,  m.  Duration))) 
Condition  II: 

Cmsgs[5,  mj.msg. NumReceive  >  Cmsgs[5,  mj.msg. Squadrons 
Condition  III:True 

8.34:  Does  not  reject  Cmsgs.msg. NumSend  > 
Cmsgs.msg. Squadrons 
Condition  I: 

35,  5  G  {true, false), 

(3/,l  <  /  <  NArmy[5], 

(3m,  m  G  {l...NCmsgs[5]),Mfmp(5,/,m,  Duration))) 

Condition  II: 

Cmsgs[5,  mj.msg. NumSend  >  Cmsgs[5,  mj.msg. Squadrons 
Condition  III:True 
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8.36:  Divide  by  zero  in  CalcContrast 
Condition  I: 

Activt{B^  g)  A  Active{-^B,  e)A 

3i,  1  <  Army[5,  p]. Squadrons,  £^n<iurance(5,p,^’,  Mainloop)  >  OA 

3k,  1  <  k  <  Armyl-i^,  e]. Squadrons,  £'ndurance(-'5,  e,  fc,  Mainloop)  >  OA 
BigEnough{B,  g,j,  e,  k,  Mainloop)  A  Clear{B,g,j,  e,  k,  Mainloop) 

Condition  II: 

=  0  V  Params.IX  =  0)  A  Params.IC  =  OA 
(I^-’B,e,/:(Mainloop)  =  0  V  Params.IY  =  0)A 
(Params.IAltFactor  =  OV 

(Mainloop),  i'l,B,e,;t(Mainloop))  =  Params.IMeanAlt)A 
Params.ISlopeFactor  =  0 

Condition  III:True 

8.37:  Divide  by  zero  in  CalcAngle 

Condition  l:Aciive{B,g)  A  Active{->B,e) 

Condition  II: 

3i,  1  <  j  <  Army[5, p]. Squadrons,  FJn<furance(5, 5,  j,  Mainloop)  >  OA 
3^’,1  <  k  <  Arnayf-i^,  e]. Squadrons,  £ndurance(-'5,  e,  Mainloop)  >  OA 
(AB.,.j(Mainloop)  =  A^B,e.it(MainloOp)  -  Ami.vhB,e]^SquadWidth,^ 

Ab,p  j(Mainloop)  =  A.B.e’dMainloop)  +  ArmyhB.eJ^SquadWidth^ 

Condition  III:True 

8.38:  Missing  equal-y  case  in  FindAngle 

Condition  l:Active{B,g)  A  Active{->B,  e) 

Condition  II: 

3^,1  <  Army[5,  y]. Squadrons,  Fndurance(B,p,_;,  Mainloop)  >  OA 

3k,  I  <  k  <  Army[-iB,  e]. Squadrons,  Endurance{->B ,  e,  k,  Mainloop)  >  OA 
(lB.s.i(Mainloop)  =  K,B,e.  it  (Mainloop)  -  Anny[^B.el.SquadUngth^ 
yB,sj(Mainloop)  =  K,B,e,Jt(Mainloop)  +  ArmyhB.el-SquadLength^ 

Condition  III:True 
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8.40:  Out-of-Bounds  array  reference  in  FindPoints 

Condition  I: 

Active{B,  g)  A  Aciive{-'B^e)f\ 

3j,l  <  j  <  Army[B,  5']. Squadrons,  £’n<iurance(5,p,  Mainloop)  >  OA 
1  <  k  <  Army[-'5,  e]. Squadrons,  £'ndurance(-i5,  e,  A:,  Mainloop)  >  OA 
BigEnough{B,  g,  j,  e.  A:,  Mainloop) 

Condition  IIiParams.SampleRate  >  51 
Condition  IIIrTrue 


8.41:  Divide  by  zero  in  Height 

Condition  I: 

Activ€{B,  g)  A  Active{-‘B,  e)  A  Params.SampleRate  >  1 A 
3i,  1  <  i  <  Army[B,  5]. Squadrons,  Fndurance(B,  5,  j,  Mainloop)  >  OA 
3A:,  1  <  k  <  Army[-'B,  e]. Squadrons,  Fndurance(-i5,  e.  A:,  Mainloop)  >  OA 
BigEnough{B,  g,j,  e.  A;,  Mainloop) 

Condition  II: 

A'’b,5J (Mainloop)  =  A’^B,e,fc(Mainloop)  A  FB,5,i(Mainloop)  =  K,B,£,fc(Mainloop) 
Condition  III:True 


8.42:  Divide  by  zero  in  Altitude 

Condition  l:Active{B,g) 

Condition  IltParams.XDelta  =  0  V  Params.YDelta  =  0 
Condition  III:True 

8.44:  Divide  by  zero  in  CalcBI 

Condition  I: 

Active{B,  g)  A  Active{-<B,  e)A 

1  <  i  <  Army[R,j»]. Squadrons,  £'ndurance(R,^,j,  Mainloop)  >  OA 
3A',  1  <k<  Army[-i5,  e]. Squadrons,  Fndurance(-'5,  e.  A:,  Mainloop)  >  OA 
BigEnough(B,  g,j,  e,  k,  Mainloop) 

Condition  ILParams.IMeanAlt  =  0 
Condition  IILTrue 
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8.45:  Divide  by  zero  in  WeatherMoveEfFect 

Condition  l\Active{B^g) 

Condition  IlrParams.WMaxSeverity  =  0  V  Params.NumWEvents  =  0 
Condition  IILTrue 

8.46:  Divide  by  zero  in  WObsEfFect 

Condition  I: 

Active{B ,  g)  A  Active{->B,  e)  A  Params.SampleRate  >  2A 
3i,  1  <i  <  Army[5,  flf]. Squadrons,  J5n£l'urance(  Mainloop)  >  OA 

3k,  I  <  k  <  Army[-iB,  e]. Squadrons,  Endurance{->B ,  e,  k,  Mainloop)  >  OA 
BigEnough{B,  g,  j,  e,  k,  Mainloop) 

Condition  IlrParams.WMaxSeverity  =  0  V  Params.NumWEvents  =  0 
Condition  IILTrue 

8.48:  Divide  by  zero  in  UpdateK 

Condition  I: 

Aciive{B,  g)  A  Params.NumWTypes  >  OA 

3u;,  1  <  tu  <  Params.NumWTypes,  A^umVPeapon(J9,  t/;,  Mainloop)  >  OA 
3i,  1  <  I  <  NumWeapon{B, g,w,  Mednloop), 

(Mainloop)  ^  oo  A  ayB_p^u;^j(Mainloop)  oo 

Condition  II: Army[5, 51]. Weapon[t/;]. Radius  =  0 
Condition  IIItTrue 

8.50:  Divide  by  zero  in  CalcRDelay 

Condition  I: 

Active{B,  g)  A  Active^-^B ,  e)A 
(NCmsgs[5]  >  OA 

3m,  1  <  m  <  NCmsgs[ 5],  5,  m.  Duration)) V 

{Active{B,  f)  A  Army[5,  /]. Report  =  gA 

3t,0  <  t  <  Duration  —  RepT{B,  f,g),  SoTneObserve{B,  f,t)) 

Condition  II:Army[->5,  ej.ComJamRadius  =  0 
Condition  III:True 
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